-
Story
-
Resolution: Unresolved
-
Major
-
None
-
Pipelines 1.11.0
-
False
-
None
-
False
-
-
-
5
Story (Required)
As a non-admin Chains user trying to get signature I want to run "tkn/opc chain" command.
Background (Required)
Currently "tkn/opc chain" command requires admin privileges because it reads config map chains-config in namespace openshift-pipelines. If user specified the required data explicitly, the command would not have to read the config map and would return required data.
$ tkn chain signature --chains-namespace openshift-pipelines kaniko-chains-run-mpjcw > sig2 Error: failed to retrieve the backend storage: failed to retrieve the backend storage: error retrieving tekton chains configmap: configmaps "chains-config" is forbidden: User "user" cannot get resource "configmaps" in API group "" in the namespace "openshift-pipelines"
Approach (Required)
CLI flags for any data that is required by "tkn chain payload" and "tkn chain signature"
Acceptance Criteria (Mandatory)
Non-admin user can use tkn chain subcommands
Done Checklist
- Code is completed, reviewed, documented and checked in
- Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
- Continuous Delivery pipeline(s) is able to proceed with new code included
- Customer facing documentation, API docs etc. are produced/updated, reviewed and published
- Acceptance criteria are met
- is related to
-
SRVKP-3008 Verify `tkn chain` and `opc chain` work as expected
- Verified