Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

INTLY-7398 allow dedicated admins modify 3scale routes #676

Merged

Conversation

briangallagher
Copy link
Contributor

Description

Add a new Role that allows the dedicated admin group edit routes in the rhmi 3scale namespace

Type of change

  • New feature (non-breaking change which adds functionality)

Verify

Verification1
Patch the route as dedicated admin and verify success:
Patch the route as rhmi developer and verify permission denied error:
oc patch route backend -p '{"metadata":{"labels":{"test":"version1"}}}' -n redhat-rhmi-3scale

Verification2
Wait a period of time to verify that the rhmi reconciler does not revert the patch change

Verification3
Check that zync:domains:resync command won't case the changes to be reverted (run the following command within the system-app pod - bundle exec rake zync:resync:domains ).

@coveralls
Copy link

coveralls commented May 6, 2020

Coverage Status

Coverage increased (+0.1%) to 60.071% when pulling 4a4c690 on briangallagher:INTLY-7398-new-role into f1df1e6 on integr8ly:master.

@briangallagher
Copy link
Contributor Author

/retest

@briangallagher
Copy link
Contributor Author

/retest

1 similar comment
@briangallagher
Copy link
Contributor Author

/retest

@matskiv
Copy link
Member

matskiv commented May 15, 2020

This test failure is a bit concerning:

user_dedicated_admin_permissions.go:116: Unable to get 3scale route as dedicated admin : &{403 Forbidden 403 HTTP/1.1 1 1 map[Audit-Id:[71ecb658-3718-4356-8827-ba95335f17a4] Cache-Control:[no-cache, private] Content-Length:[363] Content-Type:[application/json] Date:[Fri, 15 May 2020 09:47:14 GMT] X-Content-Type-Options:[nosniff]] 0xc0006f3c80 363 [] false false map[] 0xc000309c00 0xc001194160}
user_dedicated_admin_permissions.go:131: Failed to update route as dedicated admin : &{403 Forbidden 403 HTTP/1.1 1 1 map[Audit-Id:[f8e6c0b6-2f69-4e4b-8913-dcf67f2aa93f] Cache-Control:[no-cache, private] Content-Length:[366] Content-Type:[application/json] Date:[Fri, 15 May 2020 09:47:14 GMT] X-Content-Type-Options:[nosniff]] 0xc000bcff00 366 [] false false map[] 0xc000c17400 0xc001194160} 

@briangallagher
Copy link
Contributor Author

@matskiv Thanks, looking into this now

@briangallagher briangallagher changed the title [WIP] INTLY-7398 allow dedicated admins modify 3scale routes INTLY-7398 allow dedicated admins modify 3scale routes May 15, 2020
@matskiv
Copy link
Member

matskiv commented May 18, 2020

E2E test failure is tracked here btw: https://issues.redhat.com/browse/INTLY-7831

@briangallagher
Copy link
Contributor Author

/retest

@matskiv
Copy link
Member

matskiv commented May 19, 2020

/approve
/lgtm

@openshift-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: matskiv

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@matskiv
Copy link
Member

matskiv commented May 19, 2020

/test e2e

2 similar comments
@pawelpaszki
Copy link
Contributor

/test e2e

@pawelpaszki
Copy link
Contributor

/test e2e

@openshift-merge-robot openshift-merge-robot merged commit 917e1c8 into integr8ly:master May 20, 2020
@matskiv matskiv mentioned this pull request May 25, 2020
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants