[incubator/kafka] Add loadBalancerSourceRanges option (#18551)

* Add loadBalancerSourceRanges option to Load Balancer spec

Signed-off-by: Sergey Prokhorov <lisforlinux@gmail.com>

* bump chart version

Signed-off-by: Sergey Prokhorov <lisforlinux@gmail.com>

* chart version bump

Signed-off-by: Sergey Prokhorov <lisforlinux@gmail.com>

* bump chart version

Signed-off-by: Sergey Prokhorov <lisforlinux@gmail.com>

incubator/kafka/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 description: Apache Kafka is publish-subscribe messaging rethought as a distributed
   commit log.
 name: kafka
-version: 0.20.3
+version: 0.20.4
 appVersion: 5.0.1
 keywords:
 - kafka

incubator/kafka/README.md

@@ -83,6 +83,7 @@ following configurable parameters:
 | `external.distinct`                            | Distinct DNS entries for each created A record.                                                                                                                          | `false`                                                            |
 | `external.annotations`                         | Additional annotations for the external service.                                                                                                                         | `{}`                                                               |
 | `external.loadBalancerIP`                      | Add Static IP to the type Load Balancer. Depends on the provider if enabled                | `[]`
+| `external.loadBalancerSourceRanges`            | Add IP ranges that are allowed to access the Load Balancer.                                | `[]`
 | `podAnnotations`                               | Annotation to be added to Kafka pods                                                                                                                                     | `{}`                                                               |
 | `podLabels`                                    | Labels to be added to Kafka pods                                                                                                                                     | `{}`                                                               |
 | `podDisruptionBudget`                          | Define a Disruption Budget for the Kafka Pods                                                                                                                                    | `{}`                                                               |

incubator/kafka/templates/service-brokers-external.yaml

@@ -61,6 +61,12 @@ spec:
   {{- if and (eq $root.Values.external.type "LoadBalancer") (eq $loadBalancerIPLen $replicas) }}
   loadBalancerIP: {{ index $root.Values.external.loadBalancerIP $i }} 
   {{- end }}
+  {{- if $root.Values.external.loadBalancerSourceRanges }}
+  loadBalancerSourceRanges:
+    {{- range $root.Values.external.loadBalancerSourceRanges }}
+    - {{ . | quote}}
+    {{- end }}
+  {{- end }}
   selector:
     {{- include "kafka.broker.matchLabels" $root | nindent 4 }}
     statefulset.kubernetes.io/pod-name: {{ $responsiblePod | quote }}

incubator/kafka/values.yaml

@@ -153,6 +153,7 @@ external:
   firstListenerPort: 31090
   domain: cluster.local
   loadBalancerIP: []
+  loadBalancerSourceRanges: []
   init:
     image: "lwolf/kubectl_deployer"
     imageTag: "0.4"