Uploaded image for project: 'OpenShift Container Platform (OCP) Strategy'
  1. OpenShift Container Platform (OCP) Strategy
  2. OCPSTRAT-110

Hypershift-enablement for short-lived token authentication flows with OLM-managed operators with CCO

    XMLWordPrintable

Details

    • True
    • Hide

      Completion of AWS security audit work.

      Show
      Completion of AWS security audit work.
    • False
    • OCPSTRAT-6Tokenized Auth Enablement for OLM-managed Operators on Cloud Providers
    • 75
    • 75% 75%
    • 0
    • 0

    Description

      Feature Overview:

      Hypershift-provisioned clusters, regardless of the cloud provider support the proposed integration for OLM-managed integration outlined in OCPBU-559 and OCPBU-560.

       

      Goals 

      There is no degradation in capability or coverage of OLM-managed operators support short-lived token authentication on cluster, that are lifecycled via Hypershift.

       

      Requirements:

      • the flows in OCPBU-559 and OCPBU-560 need to work unchanged on Hypershift-managed clusters
      • most likely this means that Hypershift needs to adopt the CloudCredentialOperator
      • all operators enabled as part of OCPBU-563, OCPBU-564, OCPBU-566 and OCPBU-568 need to be able to leverage short-lived authentication on Hypershift-managed clusters without being aware that they are on Hypershift-managed clusters
      • also OCPBU-569 and OCPBU-570 should be achievable on Hypershift-managed clusters

       

      Background

      Currently, Hypershift lacks support for CCO.

      Customer Considerations

      Currently, Hypershift will be limited to deploying clusters in which the cluster core operators are leveraging short-lived token authentication exclusively.

      Documentation Considerations

      If we are successful, no special documentation should be needed for this.

       

      Attachments

        Issue Links

          Activity

            People

              azaalouk Adel Zaalouk
              DanielMesser Daniel Messer
              Daniel Geoffroy, James Harrington, Jeremiah Stuever, Jianping Shu, Lance Galletti, Mike Worthington, Steve Kuznetsov
              Jianping Shu Jianping Shu
              Stephanie Stout Stephanie Stout
              Steve Kuznetsov Steve Kuznetsov
              Dave Mulford Dave Mulford
              Votes:
              0 Vote for this issue
              Watchers:
              18 Start watching this issue

              Dates

                Created:
                Updated: