Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-27

Hide unavailable network policy features for admin users

    XMLWordPrintable

Details

    • Story
    • Resolution: Done
    • Undefined
    • openshift-4.10
    • None
    • None
    • 0.5
    • False
    • False
    • Hide
      - For a user with sufficient permissions (e.g. admin) using ovn-k network type, all network policy feature are available and no special information is displayed about it.

      - For a user with sufficient permissions (e.g. admin) using openshift-sdn network type, egress section and IP block exceptions are hidden, and no special information is displayed about it.

      - For a user with insufficient permissions to get the network type, all network policy features are visible but an informative message is displayed about potential unavailable features.
      Show
      - For a user with sufficient permissions (e.g. admin) using ovn-k network type, all network policy feature are available and no special information is displayed about it. - For a user with sufficient permissions (e.g. admin) using openshift-sdn network type, egress section and IP block exceptions are hidden, and no special information is displayed about it. - For a user with insufficient permissions to get the network type, all network policy features are visible but an informative message is displayed about potential unavailable features.
    • Undefined
    • NetObserv - Sprint 204, NetObserv - Sprint 205, NetObserv - Sprint 206, NetObserv - Sprint 207, NetObserv - Sprint 208

    Description

      Hiding unavailable network policy features based on CNI type can be implemented just in the console as long as the logged-in user has permissions to read the cluster network config resource.

      This story is an intermediate step to have the desired behavior for these users. More work will be necessary to cover all users (which is covered by NETOBSERV-21)

      Features to be hidden, when OpenShiftSDN is used, are:

      • Egress section in the network policy creation form
      • Exceptions in IPBlock-kind rules

      Attachments

        1. active-namespace-kept.mp4
          562 kB
          Mario Macias
        2. create-network-policy-link.mp4
          76 kB
          Mario Macias
        3. NETOBSERV-27.txt
          6 kB
          Mehul Modi

        Issue Links

          is related to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. NETOBSERV-31 Expose CNI type features as a config-map

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          GitHub openshift/console#9628: Network policy forms: hide unavailable features for admin users

          Activity

            People

              mmaciasl@redhat.com Mario Macias (Inactive)
              jtakvori Joel Takvorian
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: