Owner: Architect:

David Peraza

Story (Required)

As a Primaza Administrator, I would like Primaza to check if the context used to connect to a ClusterEnvironment has all the needed permissions.

Background (Required)

We need to define the ClusterEnvironment API defined in the Primaza architecture document. See epic for arch document link.

Glossary

See glossary in architecture document

Out of scope

Pushing any agents/controllers to the clusters

In Scope

Implement

Approach(Required)

Controller should validate the following:

• The cluster SA has access to push resources to application namespaces in cluster
• The cluster SA has access to read resources from the service namespaces in cluster

ClusterEnvironment's Status.State field should be updated accordingly:

• Cluster is partial if some of the conditions above are met, there should be a warning describing the issues

Demo requirements(Required)

A good demo will show 3 ClusterEnvironment resources, one with online status, one with partial, and one with offline status

Dependencies

NA

Edge Case

NA

Acceptance Criteria

• Development
  ClusterEnvironment controller checks whether it has all the needed permissions for working on target namespaces

• QE
  There are test cases for online, partial, and offline clusters.

• Docs
  There is a page in our docs dedicated to explaining what a ClusterEnvironment is including the different states it could be in and the error conditions
  Update architecture document with any changes while implementing
  There is a link in our main readme to the ClusterEnvironment page

INVEST Checklist

Dependencies identified
Blockers noted and expected delivery timelines set
Design is implementable
Acceptance criteria agreed upon
Story estimated

Legend

Unknown
Verified
Unsatisfied