-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
BU Product Work
-
5
-
False
-
-
False
-
OCPSTRAT-1571 - Add Authorization to internal Components of Agent-Based Installer
-
-
-
Installer Sprint 260, Installer Sprint 261, Installer Sprint 262
User Story:
As a wait-for and monitor-add-nodes user, I want to be able to:
- Access relevant endpoints in a read-only capacity to monitor the progress of hosts joining a cluster.
- View and verify the addition of nodes to an existing cluster without the ability to make changes.
- Receive accurate and up-to-date information related to waiting for hosts and monitoring added nodes without requiring administrative permissions.
So that I can achieve:
- Secure and restricted read-only access to essential information, ensuring that there is no risk of unintended modifications.
- Prevent unauthorized or unintended changes to the system, maintaining the security and integrity of the environment.
- Facilitate clear and appropriate authorization for the read-only role
Acceptance Criteria:
Description of criteria:
- The swagger.yaml file must be updated to include read-only security definitions specifically for the wait-for and monitor-add-nodes user personas.
- The relevant endpoints should be configured to utilize these read-only security definitions.
- Ensure that the wait-for and monitor-add-nodes users can only view data without the ability to make changes.
- The changes must be tested and validated to confirm the correct implementation of read-only access.
(optional) Out of Scope:
Detail about what is specifically not being delivered in the story
Engineering Details:
- (optional) https://github/com/link.to.enhancement/
- (optional) https://issues.redhat.com/link.to.spike
- Engineering detail 1
- Engineering detail 2
This requires/does not require a design proposal.
This requires/does not require a feature gate.