Auth Callout in NATS helm chart

[AlexHu0208]

Hi team,

I am trying to config the auth callout in NATS helm chart values.yaml.

In the helm chart, I also configured the resolver and resolver_preload with couple of predefined accounts.

config:
  resolver:
    enabled: true
    merge:
      type: full
      interval: 2m
      timeout: 1.9s
  merge:
    operator: OPERATOR_JWT
    system_account: SYS_ACCOUNT_ID
    resolver_preload:
      SYS_ACCOUNT_ID: SYS_ACCOUNT_JWT

When I kick off the deployment, I am seeing the following error

nats-server/server/jwt.go

Lines 158 to 160 in 0f0770e

	if o.AuthCallout != nil {
	return errors.New("operators do not allow authorization callouts to be configured directly")
	}

Is there any way I can keep my resolver configuration but still add the auth callout? I am still learning the NATS, so it can be very helpful if someone can explain why we have this kind of restriction.

Thanks for the help.