-
Notifications
You must be signed in to change notification settings - Fork 10
BASIS-556: configure origin and host for access check and bss stats #780
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
BASIS-556: configure origin and host for access check and bss stats #780
Conversation
charts/tiles-api/values.yaml
Outdated
# @param proxy.access.raster.token Service key for raster data in Keys API. Used for key validation. If Keys API is unavailable or token is empty/invalid, tile service will continue to work without key validation (with warning in logs). | ||
# @param proxy.access.vector.token Service key for vector data in Keys API. Used for key validation. If Keys API is unavailable or token is empty/invalid, tile service will continue to work without key validation (with warning in logs). | ||
|
||
# @extra proxy.access.skipExactOrigins **Exact origins that will skip access key check** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
В описании переменных не очень понятно поведение. В описании к ПРу прям хорошо расписано. Давай добавим сюда (ко всем переменным, которые принесли) аналогичное описание?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Поменял описание на более понятно, оно действительно было неочевидно
charts/tiles-api/values.yaml
Outdated
skipExactOrigins: | ||
enabled: false | ||
useDefaultValue: false | ||
originRegexpPattern: '' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Тут помимо описания бы еще пример привести, в каком формате мы ожидаем заголовки
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Добавил пример
charts/tiles-api/values.yaml
Outdated
|
||
registerExactHosts: | ||
enabled: false | ||
useDefaultValue: false |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
А зачем вот эта лишняя логика про дефолт? Вы не можете у себя при деплое просто использовать registerExactHosts.enabled true и registerExactHosts.hostRegexpPattern прописывать сами свое дефолтное значение?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Убрал
charts/tiles-api/values.yaml
Outdated
|
||
skipExactOrigins: | ||
enabled: false | ||
useDefaultValue: false |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
аналогично комменту про дефолт
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Тоже убрал
…вки bss статистики в tiles-api
bcb7a9b
to
1b2360c
Compare
charts/tiles-api/values.yaml
Outdated
# @extra proxy.access.stat.registerExactHosts **Register requests to BSS for exact hosts feature settings** | ||
# @param proxy.access.stat.registerExactHosts.enabled If disabled, all requests will be registered in BSS, otherwise the only requests to exact hosts that matches regexp will be registered (hosts of tiles-api). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
# @extra proxy.access.stat.registerExactHosts **Register requests to BSS for exact hosts feature settings** | |
# @param proxy.access.stat.registerExactHosts.enabled If disabled, all requests will be registered in BSS, otherwise the only requests to exact hosts that matches regexp will be registered (hosts of tiles-api). | |
# @extra proxy.access.stat.registerExactHosts **Register requests to stat-receiver for exact hosts feature settings** | |
# @param proxy.access.stat.registerExactHosts.enabled If disabled, all requests will be registered in stat-receiver, otherwise the only requests to exact hosts that matches regexp will be registered (hosts of tiles-api). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Поправил, спасибо
нужно обновить образ, в котором это поддержали |
задача на проверку https://jira.2gis.ru/browse/ONPREM-2541 |
…d-bss-stats' of github.com:2gis/on-premise-helm-charts into BASIS-556-configure-origin-and-host-for-access-check-and-bss-stats
Pull Request description
access.skip-exact-origins.enabled
, если false - все запросы за векторными, растровыми, mapbox тайлами будут проверяться на ключaccess.skip-exact-origins.regexp-pattern
- то запросы с заголовком Origin попадающим под regexp не будет проверяться в сервисе ключейaccess.bss.register-exact-hosts.enabled
, если false - все запросы будут регистрироваться в bssaccess.bss.register-exact-hosts.regexp-pattern
- то только запросы с host попадающим под regexp будут регистрироваться в bssChangelog
Issues
BASIS-556
(https://jira.2gis.ru/browse/BASIS-556)Breaking changes
Check-list. Чек-лист код-ревью
helm lint charts/search-api