Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-34770 (User import job) Bootstrap existing Tenants, default group members, and user_id (standard JWT "sub") so access checks work and can use JWTs or identity header without having to use PII or lookup UUID from RBAC
  3. RHCLOUD-34859

Migrate existing user relations for default access

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • Unset
    • CRCPLAN-232 - Kessel | PRBAC v2 Service Provider Migration Enablement (Internal)
    • 3
    • Access & Management Sprint 96, Access & Management Sprint 97, Access & Management Sprint 98

      Existing users in all orgs (not just RBAC-visible orgs) will need to have default access relations created in SpiceDB.

      This task is to leverage exported data from RHCLOUD-34860 and create default group user membership tuples in Relations, using the user_id.

      This should use the outbox to publish

      Since RHCLOUD-34770 needs user_ids for each Principal stored which can be retrieved from the same export, these jobs should be combined.

              rh-ee-zhzeng Jay Zeng
              kwalsh@redhat.com Keith Walsh
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: