Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-20208

Support hub name access for RBAC users

XMLWordPrintable

    • Quality / Stability / Reliability
    • 5
    • False
    • Hide

      None

      Show
      None
    • False
    • Hide

      Provide the required acceptance criteria using this template.

      • ...
      Show
      Provide the required acceptance criteria using this template. ...
    • ACM Console Train 27 - 2
    • None

      Value Statement

      There are many cases in the ACM console where the name of the hub cluster is used. We must ensure that correct function does not depend on a user having access to the ManagedCluster resource that represents the hub cluster.

      Definition of Done for Engineering Story Owner (Checklist)

      • ACM console code is able to access the name of the hub cluster regardless of user permissions
      • Errors such as https://issues.redhat.com/browse/ACM-20085 are avoided without needing to assume that the hub name is local-cluster

      Development Complete

      • The code is complete.
      • Functionality is working.
      • Any required downstream Docker file changes are made.

      Tests Automated

      • [ ] Unit/function tests have been automated and incorporated into the
        build.
      • [ ] 100% automated unit/function test coverage for new or changed APIs.

      Secure Design

      • [ ] Security has been assessed and incorporated into your threat model.

      Multidisciplinary Teams Readiness

      • [ ] Create an informative documentation issue using the Customer

      Portal Doc template that you can access from [The Playbook](

      https://docs.google.com/document/d/1YTqpZRH54Bnn4WJ2nZmjaCoiRtqmrc2w6DdQxe_yLZ8/edit#heading=h.9fvyr2rdriby),

      and ensure doc acceptance criteria is met.

      • Call out this sentence as it's own action:
      • [ ] Link the development issue to the doc issue.

      Additional Information

      We will need to implement a backend route that checks the user is logged in, but then uses the service account token to read and return the name of the hub cluster from the cache of ManagedCluster resources. The frontend code will need to fetch from this route, and probably cache the result. (May want to use React Query or Recoil for this.) Frontend code will need to be updated to use this value.

      Related frontend work (which needs to be redone):
      https://github.com/stolostron/console/pull/4220
      https://github.com/stolostron/console/pull/4078

      Related backend work (showing how to get hub name):
      https://github.com/stolostron/console/pull/4205

      • [ ] The must-gather script has been updated.

              rh-ee-ndhevar Nitin Dhevar
              rh-ee-kcormier Kevin Cormier
              Atif Shafi Atif Shafi
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: