Clean up subnet CIDR definitions

Author: szabozoltan69

base-infrastructure/terraform/resources/helm-ingress-nginx.tf

@@ -29,6 +29,7 @@ resource "helm_release" "ifrcgo-ingress-nginx" {
     value = azurerm_public_ip.ifrcgo.ip_address
   }
 
+  # IP logging (preserve client IPs for ingress logs)
   set {
     name  = "controller.config.use-forwarded-headers"
     value = "true"
@@ -46,7 +47,7 @@ resource "helm_release" "ifrcgo-ingress-nginx" {
 
   set {
     name  = "controller.config.set-real-ip-from"
-    value = "10.1.0.0/16"
+    value = local.aks_subnet_cidr
   }
 
 }

base-infrastructure/terraform/resources/variables.tf

@@ -85,8 +85,9 @@ variable "ifrcgo_prod_resources_db_server" {
 # Local variables
 
 locals {
-  location = lower(replace(var.REGION, " ", ""))
-  prefix   = var.environment == "staging" ? "ifrctgo" : "ifrcpgo"
+  location        = lower(replace(var.REGION, " ", ""))
+  prefix          = var.environment == "staging" ? "ifrctgo" : "ifrcpgo"
+  aks_subnet_cidr = "10.1.0.0/16"
   # stack_id = "ifrcgo"
   # prefixnodashes        = "${local.stack_id}${var.environment}"
   storage = local.prefix

base-infrastructure/terraform/resources/vnet.tf

@@ -10,7 +10,7 @@ resource "azurerm_subnet" "aks" {
   name                 = "${local.prefix}-aks-subnet"
   virtual_network_name = azurerm_virtual_network.ifrcgo-cluster.name
   resource_group_name  = data.azurerm_resource_group.ifrcgo.name
-  address_prefixes     = ["10.1.0.0/16"]
+  address_prefixes     = [local.aks_subnet_cidr]
 }
 
 # subnet for postgres that's delegated