Add SecurityManager dynamically

Author: Maleware

rust/crd/src/lib.rs

@@ -88,7 +88,7 @@ pub enum SupersetConfigOptions {
     AuthLdapTlsCacertfile,
     CustomSecurityManager,
     StackableOpaEndpoint,
-    OpaPackageName,
+    StackableOpaPackage,
 }
 
 impl SupersetConfigOptions {
@@ -138,7 +138,7 @@ impl FlaskAppConfigOptions for SupersetConfigOptions {
             SupersetConfigOptions::AuthLdapTlsCacertfile => PythonType::StringLiteral,
             SupersetConfigOptions::CustomSecurityManager => PythonType::StringLiteral,
             SupersetConfigOptions::StackableOpaEndpoint => PythonType::StringLiteral,
-            SupersetConfigOptions::OpaPackageName => PythonType::StringLiteral,
+            SupersetConfigOptions::StackableOpaPackage => PythonType::StringLiteral,
             // TODO: Set new options for OpaSecurityManager like:
         }
     }

rust/operator-binary/src/config.rs

@@ -35,7 +35,6 @@ pub const PYTHON_IMPORTS: &[&str] = &[
     "from log_config import StackableLoggingConfigurator",
     ];
 
-// TODO: Eihter use or remove this
 pub const OPA_IMPORTS: &[&str] =
     &["from superset.security.manager import OpaSupersetSecurityManager"];
 

rust/operator-binary/src/superset_controller.rs

@@ -559,7 +559,7 @@ fn build_rolegroup_config_map(
     vector_aggregator_address: Option<&str>,
 ) -> Result<ConfigMap, Error> {
     let mut config_properties = BTreeMap::new();
-    let imports = PYTHON_IMPORTS;
+    let mut imports = PYTHON_IMPORTS.to_vec();
     // TODO: this is true per default for versions 3.0.0 and up.
     //    We deactivate it here to keep existing functionality.
     //    However this is a security issue and should be configured properly
@@ -577,7 +577,7 @@ fn build_rolegroup_config_map(
         }
         // If opa role mapping is configured, insert CustomOpaSecurityManager import
         for opa_import in OPA_IMPORTS {
-            imports.to_vec().push(&opa_import);
+            imports.push(&opa_import);
         }
     }
 
@@ -604,7 +604,7 @@ fn build_rolegroup_config_map(
     flask_app_config_writer::write::<SupersetConfigOptions, _, _>(
         &mut config_file,
         config_properties.iter(),
-        imports,
+        &imports,
     )
     .with_context(|_| BuildRoleGroupConfigFileSnafu {
         rolegroup: rolegroup.clone(),