Skip to content

Dynamically add AWS URLs to CSP on EKS auth page

Dominic Couture requested to merge dcouture-eks-csp into master

What does this MR do and why?

Related to #332290 (closed)

There were CSP errors (when the CSP is enabled) when adding a new EKS cluster and authenticating with AWS. This MR adds the required URLs on the AWS EKS auth panel.

Describe in detail what your merge request does and why.

Screenshots or screen recordings

These are strongly recommended to assist reviewers and reduce the time to merge your change.

How to set up and validate locally

  1. Configure Amazon EKS settings for your instance in /admin/application_settings/general#js-eks-settings
  2. Visit /-/clusters/new?provider=aws for your project
  3. Observe that the Content-Security-Policy header contains the expected value for AWS
  4. Test that the Authenticate with AWS button works as expected

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Dominic Couture

Merge request reports