Disable IP protection and network policy by default (#171)

InseeFrLab · Nov 7, 2022 · 528dca1 · 528dca1
1 parent 0820d13
commit 528dca1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/docs/region-configuration.md b/docs/region-configuration.md
@@ -120,8 +120,8 @@ A quota follows the kubernetes model which is composed of:
 
 | Key | Default | Description |
 | --------------------- | ------- | ------------------------------------------------------------------ |
-| `IPProtection` | true | Whether or not the default behavior of the reverse-proxy serving the service is to block request from an ip other than the one from which it has been created. For client purpose only. |
-| `networkPolicy` | true | Whether or not services can be reached by pods outside of the current namespace. For client purpose only. |
+| `IPProtection` | false | Whether or not the default behavior of the reverse-proxy serving the service is to block request from an ip other than the one from which it has been created. For client purpose only. |
+| `networkPolicy` | false | Whether or not services can be reached by pods outside of the current namespace. For client purpose only. |
 | `from` | NA | List of allowed source (kubernetes network policies format for from) to reach user http services. Used to allow ingress access to users services |
 | `nodeSelector` | NA | This node selector can be injected in a service to restrain on which node it can be launched  |
 | `tolerations` | NA | This node selector can be injected in a service to force it to run on nodes with this taint |

diff --git a/onyxia-api/src/main/resources/regions.json b/onyxia-api/src/main/resources/regions.json
@@ -29,8 +29,8 @@
           }
         },
         "defaultConfiguration": {
-          "IPProtection": true,
-          "networkPolicy": true
+          "IPProtection": false,
+          "networkPolicy": false
         },
         "expose": {
           "domain": "fakedomain.kub.example.com"

diff --git a/onyxia-model/src/main/java/fr/insee/onyxia/model/region/Region.java b/onyxia-model/src/main/java/fr/insee/onyxia/model/region/Region.java
@@ -175,8 +175,8 @@ public static enum AuthenticationMode {
 	private CustomInitScript customInitScript = new CustomInitScript();
 
 	public static class DefaultConfiguration {
-	    private boolean IPProtection = true;
-	    private boolean networkPolicy = true;
+	    private boolean IPProtection = false;
+	    private boolean networkPolicy = false;
 	    private List<Object> from = new ArrayList<>();
 	    private List<Object> tolerations = new ArrayList<>();
 	    private Object nodeSelector;