Skip to content

Add websocket connnection to Content Security Policy for KAS

What does this MR do and why?

To be able to connect to kubernetes APIs that require bi-directional communication, such as the exec and attach APIs, the websocket version of the URL must also be added to the content security policy.

Screenshots or screen recordings

How to set up and validate locally

  1. Configure the kubernetes agent
  2. Configure an agent for a project
  3. Navigate to http://gdk.test:3000/h5bp/html5-boilerplate/-/cluster_agents
  4. Inspect CSP for requests, checking the connect-src value.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

For #420190 (closed)

Edited by Andrew Fontaine

Merge request reports

Loading