-
Story
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
Quality / Stability / Reliability
-
False
-
-
False
-
None
-
Unset
-
None
-
-
-
I would like to discourage the use of the insights-qa test automation account via the HCC UI. Using this account has several issues:
- Multiple people logged in at the same time as the same user can cause unexpected behavior for said users, especially during demos etc.
- Any change made by someone logged in as insights-qa runs the risk of causing unexpected test failures in our automated test suites
- The insights-qa user is already overloaded with roles/groups/etc. and is reused in many tests (unnecessarily) to the point where we may not necessarily understand as teams what our end users need or experience
We should be creating and maintaining team scoped test automation users versus sharing a single user.
The process of creating a test user for stage via Ethel is documented in our platform survival guide: https://docs.google.com/document/d/1BnGpJBFdCl6kmEW2TipJsGLg0m5Eukgpx7XYNClnwM4/edit?tab=t.0
It is also possible to create prod test users and route emails to a shared google group (such as consoledot-qe-prod-test-notifications+<unique_id>@redhat.com). See https://groups.google.com/a/redhat.com/g/consoledot-qe-prod-test-notifications
Structuring complex RBAC relationships will be slightly more challenging however when creating new users, hence why this will also need longer term attention around scripting, etc.
In the short term my proposal is to:
- Add an un-dismissible red banner only for the insights-qa user on stage and prod
- I would prefer this banner be controlled by a feature flag that is only enabled for certain users via unleash,
however I do not believe this will work for ephemeral (which doesn't seem to have the feature flag proxy deployed when you deploy frontends). So for now we may need to hard code the insights-qa trigger .EDIT we should use the feature flag approach and only enable for specific users (insights-qa). The insights-qa user does not exist on ephemeral AFAIK. - The banner should read something along the lines of "This is an automated test user account. All other usage is discouraged."