ALT-828 Allow DRC2 calls with SPIRE

[dgloe-hpe]

Summary and Scope

The DRC2 feature uses a new "ogopogod" API with SPIRE. Add this to the OPA policy to enable this feature.

Issues and Related PRs

• Resolves ALT-828

Testing

Tested on:

• Local development environment

Test description:

Tested with unit tests.

• Were the install/upgrade-based validation checks/tests run (goss tests/install-validation doc)? No
• Were continuous integration tests run? If not, why? No
• Was upgrade tested? If not, why? No
• Was downgrade tested? If not, why? No
• Were new tests (or test issues/Jiras) created for this change? Yes

Risks and Mitigations

If the WLM SPIRE client secret is leaked, the attacker will be able to configure DRC2 VNIs on the system. This can be mitigated by revoking and regenerating the WLM client secret.

Pull Request Checklist

• Version number(s) incremented, if applicable
• Copyrights updated
• License file intact
• Target branch correct
• CHANGELOG.md updated
• Testing is appropriate and complete, if applicable
• HPC Product Announcement prepared, if applicable

[dgloe-hpe]

Could someone please merge this for me? I don't have permission to do so.

[ndavidson-hpe]

Could someone please merge this for me? I don't have permission to do so.

Do you need someone to make a release as well?

[dgloe-hpe]

Could someone please merge this for me? I don't have permission to do so.

Do you need someone to make a release as well?

I'm not familiar with the release process for this repo. If someone could do that for me (or point me to instructions), that would be great.

[ndavidson-hpe]

Could someone please merge this for me? I don't have permission to do so.

Do you need someone to make a release as well?

I'm not familiar with the release process for this repo. If someone could do that for me (or point me to instructions), that would be great.

I have created the release. It will generate the chart and store it in the stable section on artifactory. It will then need a PR to the CSM repo to pull in the correct chart version.