It is possible to add ip whitelist to specific endpoints in a container app

Hello @Vasile

Unfortunately, Azure Container Apps doesn't currently support IP whitelisting at the endpoint level; instead, IP access restrictions apply at the overall application (ingress) level.

However, you can implement an IP safelist within your application code. Here's a quick idea on how to do that:

1. Middleware Approach: You can create middleware that checks the incoming request's IP address against an array of allowed IPs.
2. Configuration: Store the list of allowed IPs in a configuration file (like appsettings.json for ASP.NET Core) or environment variables.
3. Implement Logic: In the middleware, parse the string of allowed IPs and check if the request's IP matches any of them. If it's not a match, you return a 403 Forbidden response.

Here’s a simplified code snippet for a Node.js Express app:

const express = require('express');
const app = express();

const allowedIPs = ['192.168.1.1', '203.0.113.5'];

app.use((req, res, next) => {
    const clientIP = req.ip;
    if (allowedIPs.includes(clientIP)) {
        next(); // IP matched, continue to next middleware
    } else {
        res.status(403).send('Access denied'); // IP not matched
    }
});

// Admin route
app.get('/admin', (req, res) => {
    res.send('Welcome to the admin panel!');
});

const PORT = process.env.PORT || 3000;
app.listen(PORT, () => {
    console.log(`Server running on port ${PORT}`);
});

References:

• Set up IP ingress restrictions in Azure Container Apps
• Manage environment variables on Azure Container Apps

Hope this helps!