Operator does not respect user provided package name for OPA

[maltesander]

Reported in https://discord.com/channels/796665978481803304/1078279544328441907/1446462204672082000

Affected Stackable version

All with OPA support

Affected Apache NiFi version

All with OPA support

Current and expected behavior

Currently the operator hardcodes nifi/allow into the config. See:

nifi-operator/rust/operator-binary/src/security/authorization.rs

Line 103 in 48f6787

<property name="OPA_RULE_HEAD">nifi/allow</property>

The package name can be set in the CRD already and is not picked up.

Possible solution

The package name should be passed through into an env var OPA_RULE_HEAD and used accordingly:
<property name="OPA_RULE_HEAD">${{env:OPA_RULE_HEAD}}</property>.

Additional context

As a workaround, OPA_RULE_HEAD can be set via env overrides.

Environment

No response

Would you like to work on fixing this bug?

None