Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-15712

ACM CNV Implement impersonation for VM related actions

XMLWordPrintable

    • ACM CNV Implement impersonation for VM related actions
    • False
    • None
    • False
    • Not Selected
    • To Do
    • ACM-15337 - ACM fine grained RBAC for OpenShift Virtualization
    • ACM-15337ACM fine grained RBAC for OpenShift Virtualization

      Epic Goal

      When you work with users in ACM and do some CNV related actions is is not clear
      on the Managed-Cluster-Side what user did something as we just control permissions on a Service-Account.

      This Epic is to implement a way to get this user info also on the Managed-Cluster

      "We are thinking that our cluster-proxy could be enhanced to enforce the impersonation when proxying a request to the managed cluster."

      ...

      Why is this important?

       

      because you cannot audit users on Managed-Clusters (ACM could claim this is not designed as you control all operations via Hub)

       

      Scenarios

      ...

      Acceptance Criteria

      ...

      Dependencies (internal and external)

      1. ...

      Previous Work (Optional):

      1. ...

      Open questions:

      Done Checklist

      • CI - CI is running, tests are automated and merged.
      • Release Enablement <link to Feature Enablement Presentation>
      • DEV - Upstream code and tests merged: <link to meaningful PR or GitHub
        Issue>
      • DEV - Upstream documentation merged: <link to meaningful PR or GitHub
        Issue>
      • DEV - Downstream build attached to advisory: <link to errata>
      • QE - Test plans in Polarion: <link or reference to Polarion>
      • QE - Automated tests merged: <link or reference to automated tests>
      • DOC - Doc issue opened with a completed template. Separate doc issue
        opened for any deprecation, removal, or any current known
        issue/troubleshooting removal from the doc, if applicable.

              jbanerje@redhat.com Joydeep Banerjee
              rhn-support-cstark Christian Stark
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: