Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-26090

Search - RBAC model refinement for all Kubernetes resources

XMLWordPrintable

    • Search support general rbac model
    • Product / Portfolio Work
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Selected
    • To Do
    • VIRTSTRAT-51 - Enable fine-grained RBAC support in ACM for Virt use cases
    • VIRTSTRAT-51Enable fine-grained RBAC support in ACM for Virt use cases
    • Critical

      OCP/Telco Definition of Done
      https://docs.google.com/document/d/1TP2Av7zHXz4_fmeX4q9HB0m9cqSZ4F6Jd4AiVoaF_2s/edit#heading=h.gaa58bzbvwde
      Epic Template descriptions and documentation.
      https://docs.google.com/document/d/14CUCEg6hQ_jpsFzJtWo29GfFVWmun2Uivrxq3_Fkgdg/edit
      ACM-wide Product Requirements (Top-level Epics)
      https://docs.google.com/document/d/1uIp6nS2QZ766UFuZBaC9USs8dW_I5wVdtYF9sUObYKg/edit

      *<--- Cut-n-Paste the entire contents of this description into your new
      Epic --->*

      Epic Goal

      Currently in 2.15 with fine grained rbac enabled, the only fine grained rbac resources that search can handle are kubevirt (virtualization) resources. Search gets authorization info from server foundations aggregate api, which only supports kubevirt resources. There is a plan to enhance the aggregate api server to support general kubernetes resources here: https://issues.redhat.com/browse/ACM-21974

      Once server foundation enhances the aggregate api to support general kubernetes resources for fine grained rbac, search will need to be enhanced based on the new aggregate api server apis.

      Why is this important?

      For search to support other fine grained rbac user cases besides virtualization.

      Scenarios

      Non-virt customers would like to use search with fine grained RBAC for their specific use cases.

      Acceptance Criteria

      ...

      Dependencies (internal and external)

      1. ...

      Previous Work (Optional):

      1. ...

      Open questions:

      Done Checklist

      • CI - CI is running, tests are automated and merged.
      • Release Enablement <link to Feature Enablement Presentation>
      • DEV - Upstream code and tests merged: <link to meaningful PR or GitHub
        Issue>
      • DEV - Upstream documentation merged: <link to meaningful PR or GitHub
        Issue>
      • DEV - Downstream build attached to advisory: <link to errata>
      • QE - Test plans in Polarion: <link or reference to Polarion>
      • QE - Automated tests merged: <link or reference to automated tests>
      • DOC - Doc issue opened with a completed template. Separate doc issue
        opened for any deprecation, removal, or any current known
        issue/troubleshooting removal from the doc, if applicable.
      • Considerations were made for Extended Update Support (EUS)

              jpadilla@redhat.com Jorge Padilla
              rh-ee-mshort Matthew Short
              Atif Shafi Atif Shafi
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: