Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-27

Hide unavailable network policy features for admin users

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • openshift-4.10
    • None
    • None
    • 0.5
    • False
    • False
    • Hide
      - For a user with sufficient permissions (e.g. admin) using ovn-k network type, all network policy feature are available and no special information is displayed about it.

      - For a user with sufficient permissions (e.g. admin) using openshift-sdn network type, egress section and IP block exceptions are hidden, and no special information is displayed about it.

      - For a user with insufficient permissions to get the network type, all network policy features are visible but an informative message is displayed about potential unavailable features.
      Show
      - For a user with sufficient permissions (e.g. admin) using ovn-k network type, all network policy feature are available and no special information is displayed about it. - For a user with sufficient permissions (e.g. admin) using openshift-sdn network type, egress section and IP block exceptions are hidden, and no special information is displayed about it. - For a user with insufficient permissions to get the network type, all network policy features are visible but an informative message is displayed about potential unavailable features.
    • Undefined
    • NetObserv - Sprint 204, NetObserv - Sprint 205, NetObserv - Sprint 206, NetObserv - Sprint 207, NetObserv - Sprint 208

      Hiding unavailable network policy features based on CNI type can be implemented just in the console as long as the logged-in user has permissions to read the cluster network config resource.

      This story is an intermediate step to have the desired behavior for these users. More work will be necessary to cover all users (which is covered by NETOBSERV-21)

      Features to be hidden, when OpenShiftSDN is used, are:

      • Egress section in the network policy creation form
      • Exceptions in IPBlock-kind rules

        1. active-namespace-kept.mp4
          562 kB
          Mario Macias
        2. create-network-policy-link.mp4
          76 kB
          Mario Macias
        3. NETOBSERV-27.txt
          6 kB
          Mehul Modi

              mmaciasl@redhat.com Mario Macias (Inactive)
              jtakvori Joel Takvorian
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: