feat: whitelisting not available on private cluster

Signed-off-by: Fredrik Klingenberg <[email protected]>
fredrkl · Nov 13, 2023 · 57d6cbc · 57d6cbc
1 parent d04c4e0
commit 57d6cbc
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 11 deletions.
diff --git a/terraform/main.tf b/terraform/main.tf
@@ -19,12 +19,12 @@ module "network" {
 }
 
 module "aks" {
-  source                         = "./modules/aks"
-  resource_group                 = azurerm_resource_group.aks
-  subnet_id                      = module.network.aks_dataplane_subnet_id
-  api_server_subnet_id           = module.network.api_server_subnet_id
-  api_server_identity_id         = module.identities.aks_identity_id
-  api_server_allowed_cidr_blocks = module.network.jumphost_subnet_cidr_blocks
+  source                 = "./modules/aks"
+  resource_group         = azurerm_resource_group.aks
+  subnet_id              = module.network.aks_dataplane_subnet_id
+  api_server_subnet_id   = module.network.api_server_subnet_id
+  api_server_identity_id = module.identities.aks_identity_id
+  #  api_server_allowed_cidr_blocks = module.network.jumphost_subnet_cidr_blocks
 
   count = var.enable_aks ? 1 : 0
 }

diff --git a/terraform/modules/aks/main.tf b/terraform/modules/aks/main.tf
@@ -36,7 +36,7 @@ resource "azurerm_kubernetes_cluster" "example" {
   api_server_access_profile {
     vnet_integration_enabled = true
     subnet_id                = var.api_server_subnet_id
-    authorized_ip_ranges     = var.api_server_allowed_cidr_blocks
+    #    authorized_ip_ranges     = var.api_server_allowed_cidr_blocks
   }
 
   tags = {

diff --git a/terraform/modules/aks/variables.tf b/terraform/modules/aks/variables.tf
@@ -21,7 +21,7 @@ variable "api_server_identity_id" {
   description = "The ID of the identity to assign to the AKS API server."
 }
 
-variable "api_server_allowed_cidr_blocks" {
-  type        = list(string)
-  description = "The CIDR blocks allowed to access the AKS API server."
-}
+#variable "api_server_allowed_cidr_blocks" {
+#  type        = list(string)
+#  description = "The CIDR blocks allowed to access the AKS API server."
+#}