feat: allow extra ips to be added to the bastion sg

[s-irvine]

Users can now specify CIDRs to be added to the bastion security group with the --extra-cidrs flag.

Resolves #164

[jondkent]

Reviewing

[abdullahgarcia]

LGTM

[jondkent]

LGTM

[raoulmillais]

This is great how about making IP detection optional entirely?

[pi-unnerup]

I can not make this work. To replicate try

• create infra on workspace network with -e /32 where ip is your ip on the second network
• simulator ssh attack on new network (I have tried both dot11 in workspace and android)

[pi-unnerup]

This is great how about making IP detection optional entirely?

#232 made a ticket here

[s-irvine]

I can not make this work. To replicate try

• create infra on workspace network with -e /32 where ip is your ip on the second network
• simulator ssh attack on new network (I have tried both dot11 in workspace and android)

I've managed to replicate the issue and I think it's to do with the IP detection breaking. The SSH command is not actually run because IP detection fails before it gets there. I think #232 will fix this issue by allowing us to disable IP detection.