Enabling Editing Endpoints

By default, the editing endpoints are disabled for security. You should only enable thse endpoint if they are protected by an API Gateway with access to the editing endpoints restricted by RBAC.

Unintended or malicious deletion of an Application, ApplicationVersion and/or ApplicationProfile can render the cluster effectively inoperable. Unauthorized registering of an ApplicationVersion can pose a security risk by running an unvetted container image on the cluster.

Requirements:
  • Cluster administration privileges

To enable them, modify the values.yaml file of the application service and set:

env:
   - name: "NV.OV.SVC.APPLICATIONS.ENDPOINTS.EDITING.ENABLED"
      value: "true"