XML

Word

Printable

Epic Name:
Azure Identity Refactor
Activity Type:
Product / Portfolio Work
Parent Link:
OCPSTRAT-1916Azure - Remove not required permissions from the Nodes
Hierarchy Progress Bar:

0% To Do, 0% In Progress, 100% Done
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Color Status:
Green
Status Summary:

Hide

3/14: The entire implementation (but no validation) is in code review and has had positive pre-merge testing with some minor changes being addressed. This is on track. If anythiing slips, it would be validation and that would be fine to handle as a bug, but I don't think that will be necessary.

Show
3/14: The entire implementation (but no validation) is in code review and has had positive pre-merge testing with some minor changes being addressed. This is on track. If anythiing slips, it would be validation and that would be fine to handle as a bug, but I don't think that will be necessary.
Size:
None

<--- Cut-n-Paste the entire contents of this description into your new Epic --->

Epic Goal

Remove automatic (opinionated) creation (and attachment) of identities to Azure nodes
Allow API to configure identities for nodes

Why is this important?

Creating and attaching identities to nodes requires elevated permissions
The identities are no longer required (or used) so we can reduce the required permissions

Users want to do a default ipi install that just works without the User Access Admin role
Users want to BYO user-assigned identity (requires some permissions)
Users want to use a system assigned identity

CI - MUST be running successfully with tests automated
Release Technical Enablement - Provide necessary release enablement details and documents.
...

CI - CI is running, tests are automated and merged.
Release Enablement <link to Feature Enablement Presentation>
DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
DEV - Downstream build attached to advisory: <link to errata>
QE - Test plans in Polarion: <link or reference to Polarion>
QE - Automated tests merged: <link or reference to automated tests>
DOC - Downstream documentation merged: <link to meaningful PR>