Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-34770 (User import job) Bootstrap existing Tenants, default group members, and user_id (standard JWT "sub") so access checks work and can use JWTs or identity header without having to use PII or lookup UUID from RBAC
  3. RHCLOUD-35577

Migrate existing org ids to "bootstrapped" Tenants (built-in Workspaces, with uuids for default role bindings and default groups)

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • Unset
    • CRCPLAN-232 - AuthZ | PRBAC v2 Service Provider Migration Initiation (Internal)
    • 3
    • Access & Management Sprint 96, Access & Management Sprint 97, Access & Management Sprint 98

      See: https://docs.google.com/document/d/16Qc4Qr8Vqwu1bQK0Wh-iAsDb98p6AQJI3HU5LMpm8w8/edit#heading=h.jpp3voesun86

      See RHCLOUD-34511 for on-going loads via UMB which should utilize the same logic. These both handle when there is the discovery of a new Tenant, this data must be loaded.

      In this case because these are existing tenants, it's important to remember that tenants using a custom default group should not get the default role binding bound.

              rh-ee-zhzeng Jay Zeng
              rhit-ahenning Alec Henninger
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: