Enable JFIS_ALLOW_IP to be configured from values.yaml

jfrog · Nov 19, 2018 · cde2212 · cde2212
1 parent cbed8d3
commit cde2212
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/stable/mission-control/README.md b/stable/mission-control/README.md
@@ -116,6 +116,7 @@ The following table lists the configurable parameters of the distribution chart
 | `insightServer.service.type`                 | Insight Server service type                     | `ClusterIP`                           |
 | `insightServer.externalHttpPort`             | Insight Server service external port            | `8082`                                |
 | `insightServer.internalHttpPort`             | Insight Server service internal port            | `8082`                                |
+| `insightServer.allowIP`                      | Range of IPs allowed to be served by Insight Server service  | `"0.0.0.0/0"`            |
 | `insightScheduler.name`                      | Insight Scheduler name                          | `insight-scheduler`                   |
 | `insightScheduler.replicaCount`              | Insight Scheduler replica count                 | `1`                                   |
 | `insightScheduler.image`                     | Container image                                 | `docker.jfrog.io/jfrog/insight-scheduler`  |

diff --git a/stable/mission-control/templates/insight-server-deployment.yaml b/stable/mission-control/templates/insight-server-deployment.yaml
@@ -107,7 +107,7 @@ spec:
         - name: JFMC_INSIGHT_SERVER_DB
           value: "{{ .Values.mongodb.db.insightServerDb }}"
         - name: JFIS_ALLOW_IP
-          value: "0.0.0.0/0"
+          value: "{{ .Values.insightServer.allowIP }}"
         - name: JFMC_INSIGHT_SERVER_PORT
           value: "{{ .Values.insightServer.internalHttpPort }}"
         ports:

diff --git a/stable/mission-control/values.yaml b/stable/mission-control/values.yaml
@@ -212,6 +212,9 @@ insightServer:
     type: ClusterIP
   externalHttpPort: 8082
   internalHttpPort: 8082
+  ## This can be used to whitelist the range of IPs allowed to be served by Insight Server service
+  ## The value must follow CIDR format
+  allowIP: "0.0.0.0/0"
   resources: {}
   #  requests:
   #    memory: "500Mi"