Enabling Editing Endpoints#
By default, the editing endpoints are disabled for security. You should only enable thse endpoint if they are protected by an API Gateway with access to the editing endpoints restricted by RBAC.
Unintended or malicious deletion of an Application
, ApplicationVersion
and/or ApplicationProfile
can render the cluster effectively inoperable. Unauthorized registering of an ApplicationVersion
can pose a security risk by running an unvetted container image on the cluster.
- Requirements:
Cluster administration privileges
To enable them, modify the values.yaml
file of the application service and set:
env:
- name: "NV.OV.SVC.APPLICATIONS.ENDPOINTS.EDITING.ENABLED"
value: "true"