Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-10676

Load the software templates on the team cluster, but don't allow execution

    • Icon: Task Task
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • Test Infrastructure
    • None
    • RHDHPAI Sprint 3269

      Task Description (Required)

      Currently the RHDH instance on our team cluster do not have our AI software templates available on them. We have previously opened RHDHPAI-286 to onboard our templates, and make them fully functional on the cluster - but that will likely bring with it a number of requirements (e.g. configuring GitHub auth and a Github org, restricting resources to prevent node exhaustion, ArgoCD configuration etc).

      As a stepping stone, we can add the templates to our cluster, without necessarily allowing the execution of them, which would allow folks to look at and play with the template input, without us needing to configure the additional requirements that template execution brings. This can be done via the RBAC plugin and restricting access to the "scaffolder.action.execute" role.

      Enabling the RBAC plugin will restrict access to the templates by default, so we need to make sure we still grant "scaffolder.template.step.read" and "scaffolder.template.parameter.read" to every user.

              johnmcollier John Collier
              johnmcollier John Collier
              RHIDP - AI
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: