chore: change IP list to string

Author: florianow

main.tf

@@ -147,31 +147,37 @@ resource "azurerm_network_security_group" "agw_nsg" {
   resource_group_name = azurerm_resource_group.minio_rg.name
 }
 
+locals {
+  allowed_ips_list = [
+    for ip in split(",", var.allowed_ip_addresses) : trimspace(ip)
+  ]
+}
+
 resource "azurerm_network_security_rule" "allow_https_ui" {
-  count                       = length(var.allowed_ip_addresses)
+  count                       = length(local.allowed_ips_list)
   name                        = "AllowHTTPS-UI-${count.index}"
   priority                    = 100 + count.index
   direction                   = "Inbound"
   access                      = "Allow"
   protocol                    = "Tcp"
   source_port_range           = "*"
   destination_port_range      = "443"
-  source_address_prefix       = var.allowed_ip_addresses[count.index]
+  source_address_prefix       = local.allowed_ips_list[count.index]
   destination_address_prefix  = "*"
   resource_group_name         = azurerm_resource_group.minio_rg.name
   network_security_group_name = azurerm_network_security_group.agw_nsg.name
 }
 
 resource "azurerm_network_security_rule" "allow_https_api" {
-  count                       = length(var.allowed_ip_addresses)
+  count                       = length(local.allowed_ips_list)
   name                        = "AllowHTTPS-API-${count.index}"
   priority                    = 200 + count.index
   direction                   = "Inbound"
   access                      = "Allow"
   protocol                    = "Tcp"
   source_port_range           = "*"
   destination_port_range      = "8443"
-  source_address_prefix       = var.allowed_ip_addresses[count.index]
+  source_address_prefix       = local.allowed_ips_list[count.index]
   destination_address_prefix  = "*"
   resource_group_name         = azurerm_resource_group.minio_rg.name
   network_security_group_name = azurerm_network_security_group.agw_nsg.name

variables.tf

@@ -76,12 +76,13 @@ variable "coraza_waf_image" {
 }
 
 variable "allowed_ip_addresses" {
-  type        = list(string)
-  description = "List of IP addresses that will be allowed to access the MinIO service (CIDR format, e.g., ['203.0.113.0/32', '192.168.1.0/24'])"
+  type        = string
+  description = "Comma-separated list of IP addresses that will be allowed to access the MinIO service in CIDR format. Example: '203.0.113.0/32' for a single IP or '10.10.10.2/32,192.168.1.0/24' for multiple IPs."
+  default     = "10.10.10.2/32"
   validation {
     condition = alltrue([
-      for ip in var.allowed_ip_addresses : can(cidrhost(ip, 0))
+      for ip in split(",", var.allowed_ip_addresses) : can(cidrhost(trimspace(ip), 0))
     ])
-    error_message = "All IP addresses must be in valid CIDR format (e.g., '203.0.113.0/32' for a single IP or '192.168.1.0/24' for a subnet)."
+    error_message = "All IP addresses must be in valid CIDR format (e.g., '10.10.10.2/32' for a single IP or '192.168.1.0/24' for a subnet)."
   }
 }