Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-37868

Tool to check relations from RBAC assignments

XMLWordPrintable

    • Product / Portfolio Work
    • False
    • Hide

      None

      Show
      None
    • False
      • internal endpoint to list relations for RBAC assignments
      • internal endpoint (can be same) to check whether those relations for RBAC assignments exist in Relation API
    • Unset
    • None
    • Access & Management Sprint 106, Access & Management Sprint 107, Access & Management Sprint 108, Access & Management Sprint 109, Access & Management Sprint 110, Access & Management Sprint 111, A&M Tech Debt Sprint Q2 2025, Access & Management Sprint 112, Access & Management Sprint 113, Access & Management Sprint 114, A&M Tech Debt Sprint Q3 2025, Access & Management Sprint 115, Access & Management Sprint 116, Access & Management Sprint 117, Access & Management Sprint 118

      This tool can be internal endpoint(s) which will allow for particular assignments in RBAC(role-group, group, cross account request,... ) which are replicated by dual writer handler to relation api to list and check whether those relations are present in Relation API.

      This needs to list all possible RBAC assignments which produce relations to RBAC.

       

      and those relations needs to be listed via endpoint and easy checked.

      Code which is used in this tool should be leveraged in ticket[1] for continuous check assignments.

      [1] https://issues.redhat.com/browse/RHCLOUD-37869

          1.
          		 Implement initial pattern to check RBAC assignments in Relation API Sub-task Closed Normal Evan Casey
          2.
          		 Check bootstrapped tenants Sub-task Closed Normal Evan Casey
          3.
          		 Check workspaces relation Sub-task Closed Normal Evan Casey
          4.
          		 Check approved cross account requests Sub-task Refinement Normal Evan Casey
          5.
          		 Check roles Sub-task ON_QA Normal Evan Casey
          6.
          		 Inventory check_workspace descendants check improve performance Sub-task Closed Normal Evan Casey
          7.
          		 Inventory check_workspace add root workspace check Sub-task Closed Normal Evan Casey
          8.
          		 Inventory check workspace add flag to enable descendent org workspace checks Sub-task Closed Normal Evan Casey

              rh-ee-ecasey Evan Casey
              lpichler@redhat.com Libor Pichler
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: