-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
[OSD-GCP] UI changes required for supporting GCP Workload Identity Federation
-
False
-
To Do
-
XCMSTRAT-48 - M1: Enable GCP workload identity federation for OSD-GCP
-
0% To Do, 6% In Progress, 94% Done
-
OCM Core Sprint 252, OCM Core Sprint 253, OCMUI Core Sprint 254, OCMUI Core Sprint 255, OCMUI Core Sprint 256, OCMUI Core Sprint 257, OCMUI Core Sprint 258, OCMUI Core Sprint 259, OCMUI Core Sprint 260, OCMUI Core Sprint 261, OCMUI Core Sprint 262
-
-
-
(11/06) UI work complete. GA expected to be Nov 11 but depending on PSC release.
This is an UI placeholder ticket for supporting Google Cloud Workload Identity Federation (WIF) OSD-GCP clusters. GCP WIF is similar to AWS STS.
For more details, refer XCMSTRAT-48
Design description
New toggle on step 2 of the OSD wizard that lets user choose 'GCP service account' or 'Workload Identity Federation' to create their OSD cluster.
The prerequisites will change if WIF is selected:
- Your Google Cloud account has the necessary resource quotas and limits to support your desired cluster size according to the cluster resource requirements
- Production Support from GCP is also recommended. To prevent potential conflicts, we recommend that you have no other resources provisioned in the project prior to provisioning OpenShift Dedicated. For more guidance, see the Customer Cloud Subscription requirements(new window or tab).
- [] I've read and completed all the prerequisites and am ready to continue creating my cluster.*
The UI will indicate 'Run OCM CLI create wif command' (automatic version)
There will be text below the auto command that links to doc that shows how to run the manual command
User will select WIF Config (term TBD)
Let the user select a WIF config from a dropdown
- Once a WIF config has been selected, it can't be selected again
- All the available WIF configs will be shown at the top of the list and enabled (Display name will be shown)
- WIF configs already in use will be shown at the bottom and disabled
- "In use by cluster - 'cluster name'"
- Sorted by creation time
- List is filterable (similar to ROSA wizard account selection)
There is a "Refresh" button to the right of the dropdown.
Validation:
If the user selected an incorrectly configured WIF config, when the user attempts to create the cluster with the selected WIF Config, the preflight error will surface this error.
Current mockup:
https://drive.google.com/file/d/1FsTCCK9Q-0Tg1WVWH1juguTlABCqKDGu/view?usp=sharing
- blocks
-
OCMUI-2440 [OCMUI][GCP WIF installations vs shared VPC] The permission banner shown in UI disappears once user grant permissions partially.
- Closed
- is blocked by
-
OCMUI-2257 [OSD Wizard][GCP WIF config]Custom VPC definitions are not loaded in wizard when user chosen "Authentication type" as "Workload identity federation"
- Closed
- is related to
-
OCMUI-2175 [OSD wizard][GCP CCS flow ]Hide or disable unsupported versions i.e. < 4.17 when user chosen "Authentication type" as "Workload Identity Federation"
- Closed
-
OCMUI-2434 [OCMUI][OSD wizard] WIF config id retained in wizard when the selected wif config was deleted from background.
- Closed
-
OCMUI-2519 OSD GCP WIF Broken link to downloads section
- Closed
-
OCMUI-2436 [OCM UI][OSD wizard] Show the selected WIF config id/name in "Review and create" step for user's review.
- Closed
- links to