-
Task
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
5
-
False
-
-
False
-
-
-
RHDHPAI Sprint 3269
Task Description (Required)
Currently the RHDH instance on our team cluster do not have our AI software templates available on them. We have previously opened RHDHPAI-286 to onboard our templates, and make them fully functional on the cluster - but that will likely bring with it a number of requirements (e.g. configuring GitHub auth and a Github org, restricting resources to prevent node exhaustion, ArgoCD configuration etc).
As a stepping stone, we can add the templates to our cluster, without necessarily allowing the execution of them, which would allow folks to look at and play with the template input, without us needing to configure the additional requirements that template execution brings. This can be done via the RBAC plugin and restricting access to the "scaffolder.action.execute" role.
Enabling the RBAC plugin will restrict access to the templates by default, so we need to make sure we still grant "scaffolder.template.step.read" and "scaffolder.template.parameter.read" to every user.