📖 ROSA HCP IAM Roles proposal #5451
Conversation
k8s-ci-robot
added
release-note-none
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
k8s-ci-robot
added
the
size/L
|
/cc @PanSpagetka |
|
@serngawy: GitHub didn't allow me to assign the following users: PanSpagetka. Note that only kubernetes-sigs members with read permissions, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
serngawy
force-pushed
the
rosa-iam
branch
3 times, most recently
from
ffa2a6d to
52c3652
Compare
| - Reduce operational overhead for users deploying OpenShift ROSA HCP clusters on AWS via CAPA. | ||
|
|
||
| ### Non-Goals | ||
| - Replacing existing IAM management workflows outside of CAPA. |
There was a problem hiding this comment.
Did you mean to write outside of ROSA here?
There was a problem hiding this comment.
ya , I will fix that.
|
|
||
| ### Implementation Details | ||
| 1. **Define CRDs for ROSA-HCP IAM roles and OIDC resources** | ||
| ROSARoleConfig is a cluster scope CRD defines the required IAM account roles, operator roles and OIDC configurations to create ROSA HCP cluster. Creating the Roles and oidc config should be in order as follow; |
There was a problem hiding this comment.
| ROSARoleConfig is a cluster scope CRD defines the required IAM account roles, operator roles and OIDC configurations to create ROSA HCP cluster. Creating the Roles and oidc config should be in order as follow; | |
| ROSARoleConfig is a cluster scope CRD defines the required IAM account roles, operator roles and OIDC configurations to create ROSA HCP cluster. Creating the Roles and OIDC config should be in order as follows; |
| 1. **Define CRDs for ROSA-HCP IAM roles and OIDC resources** | ||
| ROSARoleConfig is a cluster scope CRD defines the required IAM account roles, operator roles and OIDC configurations to create ROSA HCP cluster. Creating the Roles and oidc config should be in order as follow; | ||
| 1. Create ROSA HCP account roles. | ||
| 1. Create ROSA HCP oidc config & oidc provider. |
There was a problem hiding this comment.
| 1. Create ROSA HCP oidc config & oidc provider. | |
| 1. Create ROSA HCP OIDC config & OIDC provider. |
Signed-off-by: serngawy <[email protected]>
|
/test pull-cluster-api-provider-aws-apidiff-main |
|
@serngawy: The following test failed, say
Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
What type of PR is this?
/kind documentation
What this PR does / why we need it:
Which issue(s) this PR fixes (optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)format, will close the issue(s) when PR gets merged):Fixes #
Special notes for your reviewer:
Checklist:
Release note: