-
Bug
-
Resolution: Unresolved
-
Critical
-
None
-
4.18.0
-
None
Description of problem:
ConsolePlugin CRD is missing connect-src and object-src CSP directives, which need to be added to its API and ported into both console-operator and console itself.
Version-Release number of selected component (if applicable):
How reproducible:
Always
Steps to Reproduce:
1. Set connect-src and object-src CSP directives in the ConsolePlugin CR.
2. Save changes
3.
Actual results:
API server will error out with unknown DirectiveType type
Expected results:
Added CSP directives should be saved as part of the updated ConsolePlugin CR, and aggregated CSP directives should be set as part of the bridge server response header, containing the added CSP directives
Additional info: