From 49434ce48dabaf6c5b707d6b2ee7e2742be4357e Mon Sep 17 00:00:00 2001 From: Aaron Tye Date: Thu, 11 Jul 2024 17:19:03 -0400 Subject: [PATCH] add reverseproxy for auth (#1176) --- .../v1.x GA/configuration/powermax/_index.md | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/content/docs/authorization/v1.x GA/configuration/powermax/_index.md b/content/docs/authorization/v1.x GA/configuration/powermax/_index.md index cdcb91e4a2..8032a47bb1 100644 --- a/content/docs/authorization/v1.x GA/configuration/powermax/_index.md +++ b/content/docs/authorization/v1.x GA/configuration/powermax/_index.md @@ -79,6 +79,8 @@ Create the karavi-authorization-config secret using this command: - Update `authorization.skipCertificateValidation` to `true` or `false` depending on if you want to disable or enable certificate validation of the CSM Authorization Proxy Server. + - Update `csireverseproxy.deployAsSidecar` to `true`. + Example: ```yaml @@ -89,6 +91,14 @@ Create the karavi-authorization-config secret using this command: managementServers: - endpoint: https://localhost:9400 + csireverseproxy: + # Set enabled to true if you want to deploy csireverseproxy as sidecar + # Allowed values: + # "true" - CSI reverse proxy will be deployed as a sidecar + # "false" - CSI reverse proxy will be deployed along with driver + # Default value: "true" + deployAsSidecar: true + authorization: enabled: true @@ -122,10 +132,22 @@ Create the karavi-authorization-config secret using this command: - Update the `SKIP_CERTIFICATE_VALIDATION` environment value to `true` or `false` depending on if you want to disable or enable certificate validation of the CSM Authorization Proxy Server. + - Update the `DeployAsSidecar` environment variable for the `csipowermax-reverseproxy` component to `true`. + Example: ```yaml modules: + - name: csireverseproxy + # enabled: Always set to true + enabled: true + forceRemoveModule: true + configVersion: v2.10.0 + components: + - name: csipowermax-reverseproxy + envs: + - name: "DeployAsSidecar" + value: "true" # Authorization: enable csm-authorization for RBAC - name: authorization # enable: Enable/Disable csm-authorization