Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-23680

MulticlusterRoleAssignment - Update CRD in installer repo for unique RoleAssignment names

XMLWordPrintable

    • VMMgmt - Train-33 - Sprint 1
    • None

      webhook for avoiding duplications see https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/

      remove duplication validation from ACM-23014

      another approach that is used is to update the CRD in installer repo with using array of map keys so the roleassignment names are unique in the cr

      Testing notes - this should fail because there are two names under spec.roleassignments.name that are the same

      spec:
  roleAssignments:
    - clusterRole: view
      clusterSelection:
        clusterNames:
          - local-cluster
          - cluster-1
        type: clusterNames
      name: duplicate-name-test
    - clusterRole: edit
      clusterSelection:
        clusterNames:
          - local-cluster
          - cluster-2
        type: clusterNames
      name: duplicate-name-test
    - clusterRole: admin
      clusterSelection:
        clusterNames:
          - cluster-3
        type: clusterNames
      name: unique-name
  subject:
    apiGroup: rbac.authorization.k8s.io
    kind: User
    name: test-user

       

       

              kurwang@redhat.com Kurtis Wang
              emingora Enrique Mingorance Cano
              ManiKrishna Sai Ravi ManiKrishna Sai Ravi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: