fix: restrict frontend ingress to some IPs (#209)

* fix: restrict frontend ingress to some IPs * fix: test unset annotation in dev * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * helm is not my friend * helm hell * 🤞 * Update .gitlab-ci.yml * damn * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update www.values.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml * Update .gitlab-ci.yml
SocialGouv · Dec 9, 2020 · 19e68a0 · 19e68a0
1 parent e985d49
commit 19e68a0
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/targets/frontend/.gitlab-ci.yml b/targets/frontend/.gitlab-ci.yml
@@ -108,6 +108,8 @@ Deploy www (dev):
     name: ${CI_COMMIT_REF_SLUG}-dev2
   variables:
     MANIFEST_FOLDER: targets/frontend/.k8s/environments/dev
+    HELM_RENDER_ARGS: >-
+      --set ingress.annotations.nginx\.ingress\.kubernetes\.io\/whitelist-source-range=$IP_ALLOWLIST
 
 Deploy www (prod):
   extends:
@@ -117,3 +119,5 @@ Deploy www (prod):
     name: prod2
   variables:
     MANIFEST_FOLDER: targets/frontend/.k8s/environments/prod
+    HELM_RENDER_ARGS: >-
+      --set ingress.annotations.nginx\.ingress\.kubernetes\.io\/whitelist-source-range=$IP_ALLOWLIST