Add whitelist-source-range option to ingress-nginx

ansible/roles/apps/templates/settings/ingress.yaml

@@ -5,6 +5,11 @@ controller:
     ## providers supporting it
     ## Ref: https://kubernetes.io/docs/tutorials/services/source-ip/#source-ip-for-services-with-typeloadbalancer
     externalTrafficPolicy: Local
+  config:
+    # http://nginx.org/en/docs/http/ngx_http_access_module.html
+    # comma separated list of CIDRs, e.g. 10.0.0.0/24,172.10.0.1.
+    # By default we allow all access from everywhere
+    whitelist-source-range: '0.0.0.0/0'
   resources:
     limits:
       cpu: 100m