Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-34770 (User import job) Bootstrap existing Tenants, default group members, and user_id (standard JWT "sub") so access checks work and can use JWTs or identity header without having to use PII or lookup UUID from RBAC
  3. RHCLOUD-34859

Migrate existing user relations for default access

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • Unset
    • CRCPLAN-232 - AuthZ | PRBAC v2 Service Provider Migration Initiation (Internal)
    • 3
    • Access & Management Sprint 96, Access & Management Sprint 97, Access & Management Sprint 98

      Existing users in all orgs (not just RBAC-visible orgs) will need to have default access relations created in SpiceDB.

      This task is to leverage exported data from RHCLOUD-34860 and create default group user membership tuples in Relations, using the user_id.

      This should use the outbox to publish

      Since RHCLOUD-34770 needs user_ids for each Principal stored which can be retrieved from the same export, these jobs should be combined.

            rh-ee-zhzeng Jay Zeng
            kwalsh@redhat.com Keith Walsh
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: