What to put into LOADBALANCER_SOURCE_RANGES in ansible-vars.yaml

[sassoftware]

What to put into LOADBALANCER_SOURCE_RANGES in ansible-vars.yaml

[thpang]

The file states that you should. Listed here in the sample file: https://github.com/sassoftware/viya4-deployment/blob/main/examples/ansible-vars-iac.yaml#L4-L6

[andybouts]

Thanks for clarification. It was not clear to me before. I'll probably suggest a clarification via a PR to make it a tad easier for others.

[ceciivanov]

can you explain why i must set to the nat ip from the tf output? shouldn't i put the service cidr that is showing in the aks overview ?

[thpang]

The nat_ip value gets set in the valid CIDR ranges for your security group, firewall, etc. depending on your provider to allow north/south traffic back into the cluster.

[ceciivanov]

However this approach still exposes the service to public IP because of nginx ingress controller, i want to find new approach that uses azure VPN maybe and to set the IP to be private, what changes i need to do any advice?