add IP-based access restrictions

helm-charts/helm-values/api-import-prod.yml

@@ -25,3 +25,5 @@ tfvReportingTopicName: "mb-di-reporting-prod"
 tfvTopicName: "mb-di-data-transform-prod"
 
 clearCacheUrl: "/de/memobase/ingestapi/clear_cache"
+
+whitelistSourceRange: "132.152.230.209"
\ No newline at end of file

helm-charts/helm-values/api-import-stage.yml

@@ -25,3 +25,5 @@ tfvReportingTopicName: "mb-di-reporting-stage"
 tfvTopicName: "mb-di-data-transform-stage"
 
 clearCacheUrl: "/de/memobase/ingestapi/clear_cache"
+
+whitelistSourceRange: "132.152.230.210"
\ No newline at end of file

helm-charts/helm-values/api-import-test.yml

@@ -25,3 +25,5 @@ tfvReportingTopicName: "mb-di-reporting-prod"
 tfvTopicName: "mb-di-data-transform-prod"
 
 clearCacheUrl: "/de/memobase/ingestapi/clear_cache"
+
+whitelistSourceRange: "132.152.0.0/16"
\ No newline at end of file

helm-charts/templates/ingress.yml

@@ -7,6 +7,7 @@ metadata:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/whitelist-source-range: {{ .Values.whitelistSourceRange }}
 spec:
   tls:
     - hosts: