-
Bug
-
Resolution: Done-Errata
-
Major
-
None
-
4.15.0
-
No
-
False
-
-
N/A
-
Release Note Not Required
-
Done
Description of problem:
The "Auth Token GCP" filter in OperatorHub is displayed all the time, but in stead it should be rendered only for GPC cluster that have Manual creadential mode. When an GCP WIF capable operator is installed and the cluster is in GCP WIF mode, the Console should require the user to enter the necessary information about the GCP project, account, service account etc, which is in turn to be injected the operator's deployment via subscription.config (exactly how Azure and AWS STS got implemented in Console)
Version-Release number of selected component (if applicable):
4.15
How reproducible:
Steps to Reproduce:
1. On a non-GCP cluster, navigate to OperatorHub 2. check available filters 3.
Actual results:
"Auth Token GCP" filter is available in OperatorHub
Expected results:
"Auth Token GCP" filter should not be available in OperatorHub for a non-GCP cluster. When selecting an operator that supports "Auth token GCP" as indicated by the annotation features.operators.openshift.io/token-auth-gcp: "true" the console needs to, aligned with how it works AWS/Azure auth capable operators, force the user to input the required information to auth against GCP via WIF in the form of env vars that are set up using subscription.config on the operator. The exact names need to come out of https://issues.redhat.com/browse/CCO-574
Additional info:
Azure PR - https://github.com/openshift/console/pull/13082 AWS PR - https://github.com/openshift/console/pull/12778
UI Screen Design can be taken from the existing implementation of the Console support short-lived token setup flow for AWS and Azure described here: https://docs.google.com/document/d/1iFNpyycby_rOY1wUew-yl3uPWlE00krTgr9XHDZOTNo/edit
- blocks
-
OCPBUGS-35281 Display of "Auth Token GCP" filter in OperatorHub should be conditioned
- Closed
-
OCPSTRAT-962 OCP Console support for short-lived token enablement of OLM-managed operators using GCP WIF
- Closed
- is blocked by
-
CCO-574 Define the names of the env vars that carry GCP WIF info that go into operators
- Closed
- is cloned by
-
OCPBUGS-35281 Display of "Auth Token GCP" filter in OperatorHub should be conditioned
- Closed
- links to
-
RHEA-2024:3718 OpenShift Container Platform 4.17.z bug fix update