Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-3204

tkn/opc chains: let non-admin user specify storage configuration

XMLWordPrintable

    • False
    • None
    • False
    • 5

      Story (Required)

      As a non-admin Chains user trying to get signature I want to run "tkn/opc chain" command.

      Background (Required)

      Currently "tkn/opc chain" command requires admin privileges because it reads config map chains-config in namespace openshift-pipelines. If user specified the required data explicitly, the command would not have to read the config map and would return required data.

      $ tkn chain signature --chains-namespace openshift-pipelines kaniko-chains-run-mpjcw > sig2
      Error: failed to retrieve the backend storage: failed to retrieve the backend storage: error retrieving tekton chains configmap: configmaps "chains-config" is forbidden: User "user" cannot get resource "configmaps" in API group "" in the namespace "openshift-pipelines"
      

      Approach (Required)

      CLI flags for any data that is required by "tkn chain payload" and "tkn chain signature"

      Acceptance Criteria (Mandatory)

      Non-admin user can use tkn chain subcommands

      Done Checklist

      • Code is completed, reviewed, documented and checked in
      • Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
      • Continuous Delivery pipeline(s) is able to proceed with new code included
      • Customer facing documentation, API docs etc. are produced/updated, reviewed and published
      • Acceptance criteria are met

              ppunamiy Puneet Punamiya
              ppitonak Pavol Pitoňák
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: