Pag-enable ng Outlook email banner sa pamamagitan ng Helm

Ang email banner ay isang opsyonal na feature para sa Outlook monitoring. Isa-sanitize ng Halo ang mga email attachment kahit naka-configure man ang banner o hindi. Kapag naka-enable, ang Storage Monitor ay:

• i-mount ang Exchange Online certificate mula sa cdrplatform-secrets secret gamit ang key na exchange-online-cert
• itakda ang EXCHANGEONLINE__CertificatePath=/mnt/exchange/exchange-certificate.pfx
• gamitin ang EXCHANGEONLINE__AppId at EXCHANGEONLINE__Organization mula sa chart configuration
• likhain ang Exchange Online distribution group at transport rule sa startup
• panatilihing naka-synchronize sa background ang distribution group sa mga Outlook monitor

Mga Kinakailangan​

• Naka-configure na ang Outlook monitoring para sa serbisyo
• Na-irehistro mo na ang iyong application sa Microsoft Entra ID kasama ang mga kinakailangang Exchange Online permission
• Mayroon kang .pfx certificate na may private key para sa Exchange Online app registration — tingnan ang Setup Exchange Online for the Outlook banner para sa mga tagubilin sa paggawa ng certificate
• Alam mo ang Exchange Online app registration na AppId
• Alam mo ang Exchange Online Organization value, halimbawa glasswall.com
• Mayroon kang bersyon 2.4.0+ ng cdrplatform-storage-monitor Helm chart

Deployment​

Idagdag ang certificate sa umiiral na cdrplatform-secrets secret sa target namespace:

# Linux-only
kubectl -n cdrplatform patch secret cdrplatform-secrets \
  --type merge \
  -p "{\"data\":{\"exchange-online-cert\":\"$(base64 -w0 < exchange-certificate.pfx)\"}}"

# Windows-only
$tmpFile = [IO.Path]::GetTempFileName()
Set-Content -Path $tmpFile -NoNewline -Value ('{"data":{"exchange-online-cert":"' + [Convert]::ToBase64String([IO.File]::ReadAllBytes("path/to/exchange-certificate.pfx")) + '"}}')
kubectl -n cdrplatform patch secret cdrplatform-secrets --type merge --patch-file $tmpFile
Remove-Item $tmpFile

Pagkatapos, i-deploy o i-upgrade ang chart:

helm upgrade --install cdrplatform-storage-monitor cdrplatform-storage-monitor -n cdrplatform \
    --set image.tag="178428" \
    --set image.registry="glasswallhub.azurecr.io" \
    --set image.pullPolicy=IfNotPresent \
    --set cloud_provider=local \
    --set ingress.tls.enabled=true \
    --set ingress.tls.domain=${domain_name} \
    --set ingress.tls.secretName=tls-secret \
    --set deployment.replicaCount=1 \
    --set configuration.DATABASE__Provider="mongo" \
    --set configuration.GRAPHAPI__TenantName="${storage_monitor_tenant_name}" \
    --set configuration.WEBHOOKS__CallbackBaseAddress="https://${domain_name}" \
    --set secretsFromRef[0].DATABASE__ConnectionString.secretName="mongodb-cdrplatform-cdrp-user" \
    --set secretsFromRef[0].DATABASE__ConnectionString.key="connectionString.standard" \
    --set configuration.ENABLE_OUTLOOK_BANNER=true \
    --set configuration.EXCHANGEONLINE__AppId="<exchange-online-app-id>" \
    --set configuration.EXCHANGEONLINE__Organization="<tenant>"
    -f cdrplatform-storage-monitor/values.yaml \
    --atomic

Mga Tala​

• Upang i-disable muli ang feature, itakda ang ENABLE_OUTLOOK_BANNER pabalik sa false at i-redeploy sa pamamagitan ng Helm.