patch before_request.py to allow workspace creation with EDIT permission

manifests/helm/mlflow/1.9.0/custom-values.yaml

@@ -68,6 +68,7 @@ extraEnvVars:
   WORKSPACE_CACHE_MAX_SIZE: "1024"
   WORKSPACE_CACHE_TTL_SECONDS: "300"
   PERMISSION_SOURCE_ORDER: "user,group,regex,group-regex"
+  MLFLOW_LOGGING_LEVEL: "DEBUG"
 
 extraSecretNamesForEnvFrom:
   - mlflow-oidc-secret
@@ -82,6 +83,7 @@ extraArgs:
   appName: "oidc-auth"
   uvicornOpts: "--timeout-keep-alive 600"
   allowedHosts: "mlflow.example.org"
+  corsAllowedOrigins: "https://mlflow.example.org"
 
 service:
   type: ClusterIP
@@ -94,6 +96,7 @@ ingress:
     cert-manager.io/cluster-issuer: "selfsigned-issuer"
     cert-manager.io/duration: 8760h
     cert-manager.io/renew-before: 720h
+    konghq.com/plugins: mlflow-cors
   hosts:
     - host: mlflow.example.org
       paths:
@@ -119,6 +122,9 @@ extraVolumes:
   - name: workspace-plugin
     configMap:
       name: mlflow-workspace-plugin
+  - name: hooks-patch
+    configMap:
+      name: mlflow-hooks-patch
 
 extraVolumeMounts:
   - name: keycloak-ca-cert
@@ -127,6 +133,10 @@ extraVolumeMounts:
     readOnly: true
   - name: workspace-plugin
     mountPath: /opt/mlflow-plugins
+  - name: hooks-patch
+    mountPath: /usr/local/lib/python3.10/site-packages/mlflow_oidc_auth/hooks/before_request.py
+    subPath: before_request.py
+    readOnly: true
 
 serviceMonitor:
   enabled: false