diff --git a/components/tyk-dashboard/templates/deployment-dashboard.yaml b/components/tyk-dashboard/templates/deployment-dashboard.yaml index a08e77b8..89559d5c 100644 --- a/components/tyk-dashboard/templates/deployment-dashboard.yaml +++ b/components/tyk-dashboard/templates/deployment-dashboard.yaml @@ -267,6 +267,14 @@ spec: - name: TYK_DB_TIB_ENABLED value: {{ .Values.tib.enabled | quote }} {{- end }} + - name: TYK_DB_SECURITY_OPENPOLICY_ENABLED + value: {{ .Values.dashboard.opa.enabled | quote }} + - name: TYK_DB_SECURITY_OPENPOLICY_DEBUG + value: {{ .Values.dashboard.opa.debug | quote }} + - name: TYK_DB_SECURITY_OPENPOLICY_ENABLEAPI + value: {{ .Values.dashboard.opa.api | quote }} + - name: TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + value: {{ .Values.dashboard.opa.allowAdminPasswordReset | quote }} {{- if .Values.dashboard.extraEnvs }} {{- include "tyk-dashboard.tplvalues.render" (dict "value" .Values.dashboard.extraEnvs "context" $) | nindent 10 }} diff --git a/components/tyk-dashboard/values.yaml b/components/tyk-dashboard/values.yaml index 65affc22..5f6d2973 100644 --- a/components/tyk-dashboard/values.yaml +++ b/components/tyk-dashboard/values.yaml @@ -278,6 +278,20 @@ dashboard: # Enable support for users with the same email for multiple organisations # It is used to set TYK_DB_ENABLEMULTIORGUSERS enableMultiOrgUsers: true + opa: + # Enables OPA support. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLED + enabled: false + # Enables OPA debug mode which will allow more detailed logs about the policy execution. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_DEBUG + debug: false + # Enables OPA API mode which allows you to manage the OPA policies via the Dashboard API + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLEAPI + api: false + # If OPA is enabled with its default policies, you will need to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + # to avoid bootstrap job failure because of the OPA policy restrictions. + # It is used to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + allowAdminPasswordReset: true # replicaCount specifies number of replicas to be created if kind is Deployment. replicaCount: 1 diff --git a/tyk-control-plane/values.yaml b/tyk-control-plane/values.yaml index 144974f5..3cb97255 100644 --- a/tyk-control-plane/values.yaml +++ b/tyk-control-plane/values.yaml @@ -1095,6 +1095,20 @@ tyk-dashboard: # Enable support for users with the same email for multiple organisations # It is used to set TYK_DB_ENABLEMULTIORGUSERS enableMultiOrgUsers: true + opa: + # Enables OPA support. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLED + enabled: false + # Enables OPA debug mode which will allow more detailed logs about the policy execution. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_DEBUG + debug: false + # Enables OPA API mode which allows you to manage the OPA policies via the Dashboard API + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLEAPI + api: false + # If OPA is enabled with its default policies you will need to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + # to avoid bootstrap job failure because of the OPA policy restrictions. + # It is used to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + allowAdminPasswordReset: true # replicaCount specifies number of replicas to be created if kind is Deployment. diff --git a/tyk-stack/values.yaml b/tyk-stack/values.yaml index d2afe965..4d7f5e5d 100644 --- a/tyk-stack/values.yaml +++ b/tyk-stack/values.yaml @@ -1107,6 +1107,21 @@ tyk-dashboard: # Enable support for users with the same email for multiple organisations # It is used to set TYK_DB_ENABLEMULTIORGUSERS enableMultiOrgUsers: true + # Manage dashboard API Open Policy Agent(OPA) support + opa: + # Enables OPA support. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLED + enabled: false + # Enables OPA debug mode which will allow more detailed logs about the policy execution. + # It is used to set TYK_DB_SECURITY_OPENPOLICY_DEBUG + debug: false + # Enables OPA API mode which allows you to manage the OPA policies via the Dashboard API + # It is used to set TYK_DB_SECURITY_OPENPOLICY_ENABLEAPI + api: false + # If OPA is enabled with its default policies you will need to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + # to avoid bootstrap job failure because of the OPA policy restrictions. + # It is used to set TYK_DB_SECURITY_ALLOWADMINRESETPASSWORD + allowAdminPasswordReset: true # replicaCount specifies number of replicas to be created if kind is Deployment. replicaCount: 1