diff --git a/charts/csm-authorization/Chart.yaml b/charts/csm-authorization/Chart.yaml index 31ce6501..74c617e7 100644 --- a/charts/csm-authorization/Chart.yaml +++ b/charts/csm-authorization/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 name: csm-authorization -version: 1.3.0 -appVersion: 1.3.0 +version: 1.3.1 +appVersion: 1.3.1 type: application description: CSM for Authorization is part of the [Container Storage Modules](https://github.com/dell/csm) open source suite of Kubernetes storage enablers for Dell EMC storage products. CSM for Authorization provides storage and Kubernetes administrators the ability to apply RBAC for Dell CSI Drivers. dependencies: diff --git a/charts/csm-authorization/policies/url.rego b/charts/csm-authorization/policies/url.rego index fe0e04b1..071638ae 100644 --- a/charts/csm-authorization/policies/url.rego +++ b/charts/csm-authorization/policies/url.rego @@ -33,7 +33,7 @@ allowlist = [ "POST /api/instances/Volume::[a-f0-9]+/action/removeVolume/" ] -default allow = false +default allow = true allow { regex.match(allowlist[_], sprintf("%s %s", [input.method, input.url])) } diff --git a/charts/csm-authorization/values.yaml b/charts/csm-authorization/values.yaml index 69af919c..d5372e88 100644 --- a/charts/csm-authorization/values.yaml +++ b/charts/csm-authorization/values.yaml @@ -35,7 +35,7 @@ authorization: # proxy-server ingress configuration proxyServerIngress: - ingressClassName: # nginx + ingressClassName: nginx # additional host rules for the proxy-server ingress hosts: [] @@ -46,15 +46,15 @@ authorization: # tenant-service ingress configuration tenantServiceIngress: - ingressClassName: # nginx + ingressClassName: nginx # additional host rules for the tenant-service ingress hosts: [] # additional annotations for the tenant-service ingress # if applicable, an annotation supporting grpc for your ingress controller must be supplied - annotations: {} - # nginx.ingress.kubernetes.io/backend-protocol: "GRPC" + annotations: + nginx.ingress.kubernetes.io/backend-protocol: "GRPC" # role-service ingress configuration roleServiceIngress: @@ -65,8 +65,8 @@ authorization: # additional annotations for the role-service ingress # an annotation supporting grpc for your ingress controller must be supplied, if applicable - annotations: {} - # nginx.ingress.kubernetes.io/backend-protocol: "GRPC" + annotations: + nginx.ingress.kubernetes.io/backend-protocol: "GRPC" # storage-service ingress configuration storageServiceIngress: @@ -77,8 +77,8 @@ authorization: # additional annotations for the storage-service ingress # an annotation supporting grpc for your ingress controller must be supplied, if applicable - annotations: {} - # nginx.ingress.kubernetes.io/backend-protocol: "GRPC" + annotations: + nginx.ingress.kubernetes.io/backend-protocol: "GRPC" redis: images: