[Operations] Ensure we accept only limited size of payload from 3rd party systems (Director, OAUth)

[tobiscr]

Description

To ensure an external system cannot overload the Compass Manager, we have to ensure that we don't accept unusual huge response bodies from remote calls to 3rd party systems (e.g. Director or OAuth).

The HTTP Client should stop the request if the response body is bigger than 2 MB as it's indicating an unusual behaviour of the 3rd party system.

AC:

• Verify calls to remote systems and adjust all calls to accept only a limited size of the response body (e.g. 2 MB or any other meaningful size). Compass communicagtes usually to three remote systems, like Compass Director, Compass Connector and the OAuth-provider.

Reasons

Prevent outages of Compass Manager in case of 3rd party system misbehaviour.

Attachments