• Includes demo prep that should probably be tasked out, like but not limited to:
  • Deploying RBAC, Kessel, and HBI to ephemeral
  • Stretch/Spike: can we get working UIs for RBAC and HBI?
  • Populating HBI with 100 hosts
    • These come from a message queue- does HBI have a process we could use to do this?
• Perform a demo that shows hosts:

• • being ingested
  • being assigned to workspaces
  • being accessible to certain users (and not others- consider having multiple concurrent sessions for side-by-side)

• • • and how workspace membership affects this
• Look to this document from HBI for inspiration. Example:
  • Workspaces
    • Ungrouped Hosts
    • IT Team A
    • IT Team B
  • Groups/Roles
    • Default Access
      • remove Inventory Hosts Admin role (to allow granular permissions)
      • should already allow staleness:staleness:read by default
    • IT Team A
      • host read/write on IT Team A
    • IT Team B
      • host read/write on IT Team B
    • Support
      • host read/write on Ungrouped Hosts
      • host read on all hosts
  • Users (at least 1 each)
    • An org admin (jdoe)
    • A support member (sara)
    • A team A member (alice)
    • A team B member (bob)
  • Steps (suggestion, uses two browser sessions for side-by-side)
    • Load 100 hosts (ungrouped)
    • Log in as jdoe
    •  (jdoe) Show the group/role configuration in RBAC, explain the setup
      • Good spot for a callback to the earlier API-only demos (example) based on the same material
    • (jdoe) View/update staleness settings to increase staleness window
      • Tests staleness:staleness:write
      • Helps ensure hosts won't be garbage collected (default time is 1hr IIRC)
    • (new/incognito tab) Log in as sara
    • (sara) Pull up ungrouped hosts
      • Should be 100
    • (sara) Assign some hosts to IT Team A
      • Tests moving hosts
    • (sara) View one of the hosts moved to IT Team A
      • Should be readonly
      • Tests inventory:hosts:read
    • (original tab) log out jdoe/log in alice
    • (alice) List hosts
      • Should be only the ones assigned to Team A
      • Tests inventory:hosts:read by workspace
    • (alice) Open a specific host
      • Tests inventory:hosts:read for a host (by workspace)
    • (alice) Update the display name of a host
      • Tests inventory:hosts:write by workspace
    • (sara) Assign some hosts to IT Team B
    • (original tab) Log out alice/log in bob
      • Alternatively: log out sara/log in bob, which allows alice and sara to show side-by-side
    • (bob) List hosts
      • Should be only the ones assigned to Team B (not Team A)
      • Tests inventory:hosts:read by workspace (again)
    • (bob) open a specific host
    • (bob) edit display name

If the timing works out, there may be two demos: one for RHCLOUD-39204 (minimal) and one for RHCLOUD-39244 (Kessel Aware), though the setup and script should be the same.