vdk-control-service: add support for allowlist in helm chart. (#1283)

* vdk-control-service: add support for allowlist in helm chart. Signed-off-by: murphp15 <[email protected]> * vdk-control-service: add support for allowlist in helm chart. Signed-off-by: murphp15 <[email protected]> Signed-off-by: murphp15 <[email protected]>
vmware · Nov 3, 2022 · 5322a5a · 5322a5a
1 parent 1ccde40
commit 5322a5a
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/.../control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml b/.../control-service/projects/helm_charts/pipelines-control-service/templates/deployment.yaml
@@ -182,6 +182,8 @@ spec:
               value: "{{ .Values.monitoringSync.delayMillis }}"
             - name: DEFAULT_MONITORING_INITIAL_DELAY_SYNC_INTERVAL
               value: "{{ .Values.monitoringSync.initialDelayMillis }}"
+            - name: UPLOAD_VALIDATION_FILETYPES_ALLOWLIST
+              value: "{{ .Values.uploadValidationFileTypesAllowList }}"
             {{- if .Values.datajobTemplate.enabled }}
             - name: K8S_DATA_JOB_TEMPLATE_FILE
               value: "/etc/datajobs/k8s_data_job_template.yaml"
@@ -232,6 +234,7 @@ spec:
             - name: DATAJOBS_DEPLOYMENT_BUILDER_SERVICE_ACCOUNT_NAME
               value: "{{ .Values.deploymentBuilder.serviceAccountName }}"
             {{- end }}
+
 {{- if .Values.extraVars }}
 {{ toYaml .Values.extraVars | indent 12 }}
 {{- end }}

diff --git a/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml b/projects/control-service/projects/helm_charts/pipelines-control-service/values.yaml
@@ -152,6 +152,14 @@ deploymentGitPassword: ""
 uploadGitReadWriteUsername: ""
 uploadGitReadWritePassword: ""
 
+# List of file types that are allowed to be uploaded.
+# It is comma separated list with file types. For example "image/png,text/plain"
+# Only base type can be specified as well, then all files with that base type are allowed.
+# For example to allow all text files say "text" only, then any file with type "text/xxx" will be allowed.
+# Instead to allow only sql and ini text files specify "text/x-sql,text/x-ini"
+# Full list of file types are documented in https://tika.apache.org
+# If set to empty, then all file types are allowed.
+uploadValidationFileTypesAllowList: ""
 
 ## [Required] The repository where the data job images will be stored (so write permission must be granted)
 ## Automatically a repository will be created for each data job in ${deploymentDockerRepository}/data-job-name