Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1973254

Summary: CNF test container | Image Mirroring to the cluster internal registry | Add new RBAC rules
Product: OpenShift Container Platform Reporter: Nikita <nkononov>
Component: DocumentationAssignee: Sara Thomas <sarthoma>
Status: CLOSED CURRENTRELEASE QA Contact: XiuJuan Wang <xiuwang>
Severity: low Docs Contact: Vikram Goyal <vigoyal>
Priority: unspecified    
Version: 4.8CC: aos-bugs, jokerman, xiuwang
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-08-05 19:43:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Nikita 2021-06-17 13:50:54 UTC 
Document URL: 
https://docs.openshift.com/container-platform/4.7/scalability_and_performance/cnf-performance-addon-operator-for-low-latency-nodes.html#cnf-performing-end-to-end-tests-mirroring-to-cluster-internal-registry_cnf-master

Section Number and Name: 
Mirroring to the cluster internal registry

Describe the issue: 
We need to add few more RBAC rules in step 4 because we install new test namespaces in 4.8 (Make that image stream available to all the namespaces used for tests. This is required to allow the tests namespaces to fetch the images from the cnftests image stream.)

Suggestions for improvement: 
Add following RBAC rules
oc policy add-role-to-user system:image-puller system:serviceaccount:xt-u32-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:vrf-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:gatekeeper-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:ovs-qos-testing:default --namespace=cnftests
Comment 1 Sara Thomas 2021-08-04 17:19:58 UTC 
Nikita, does this update begin with 4.8 or 4.7? 

Ready for QA, @xiuwang
Comment 2 Nikita 2021-08-04 17:45:21 UTC 
It begins with 4.8.
Comment 3 Sara Thomas 2021-08-04 19:59:19 UTC 
Oh, sorry I didn't put the GitHub PR link: https://github.com/openshift/openshift-docs/pull/35198
Comment 4 XiuJuan Wang 2021-08-05 07:50:30 UTC 
Hi, I am not familiar with CNF test, maybe you need concact the cnf qe.
The docs updating the RBAC rules that I don't know what're used for.
Comment 5 Nikita 2021-08-05 13:05:12 UTC 
It looks good. I move it to verify
Comment 6 Sara Thomas 2021-08-05 19:43:27 UTC 
Thank you. I am marking this as closed, link to live doc: https://docs.openshift.com/container-platform/4.8/scalability_and_performance/cnf-performance-addon-operator-for-low-latency-nodes.html#cnf-performing-end-to-end-tests-disconnected-mode_cnf-master