Building on RHCLOUD-41247, demo HBI with 10k hosts across 9 workspaces (+ ungrouped) and a variety of users:

      • Sara, who only has access to ungrouped hosts
        • 1000 hosts + any additional hosts added after initial seeding
        • Should be functionally equivalent to V1 except calling Kessel instead of RBAC
      • Alice who has access to team a hosts
        • 1000 hosts
        • Should be functionally equivalent to V1 except calling Kessel instead of RBAC
      • Bob who has access to team b hosts
        • Optional, not significantly different from team a for this scenario
      • jdoe who has access to all hosts
        • 10,000 hosts + any additional added after initial seeding
        • The only case that's functionally different- because Kessel doesn't distinguish between having access to all things individually vs having access to everything (in RBAC terms: a permission with no resource filters vs a permission with all resources enumerated in the resource filter), some queries will be different (including what are essentially tautology predicates) which should not affect results but may impact performance. Having more workspaces may increase this effect.

              Unassigned Unassigned
              wscalf@redhat.com William Scalf
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: