Add support for ingress config proxy-real-ip-cidr

[Allan Vidal]

The charm allows enabling `use-forwardded-headers`: https://charmhub.io/kubernetes-worker/configuration#ingress-use-forwarded-headers

However, it's most useful (and safe) to use that together with proxy-real-ip-cidr. That prevents the ingress from trusting forwarded headers from all sources, and instead accept it only from a few known trustworthy sources (e.g., one specific load balancer).

See:
- https://kubernetes.github.io/ingress-nginx/user-guide/miscellaneous/#source-ip-address
- https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-real-ip-cidr

Would it be possible add this new configuration to the charm?

[Matheus Carvalho Raimundo (mcarvalhor)]

Maybe https://github.com/charmed-kubernetes/charm-kubernetes-worker

[Allan Vidal (alnvdl)]

Matheus, I'm not sure I understand your message. That page you linked tells me to open the issue here.