Bug 1973254 - CNF test container | Image Mirroring to the cluster internal registry | Add new RBAC rules
Summary: CNF test container | Image Mirroring to the cluster internal registry | Add n...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Documentation
Version: 4.8
Hardware: All
OS: Unspecified
unspecified
low
Target Milestone: ---
: ---
Assignee: Sara Thomas
QA Contact: XiuJuan Wang
Vikram Goyal
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-06-17 13:50 UTC by Nikita
Modified: 2021-08-05 19:43 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-08-05 19:43:27 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Nikita 2021-06-17 13:50:54 UTC
Document URL: 
https://docs.openshift.com/container-platform/4.7/scalability_and_performance/cnf-performance-addon-operator-for-low-latency-nodes.html#cnf-performing-end-to-end-tests-mirroring-to-cluster-internal-registry_cnf-master

Section Number and Name: 
Mirroring to the cluster internal registry

Describe the issue: 
We need to add few more RBAC rules in step 4 because we install new test namespaces in 4.8 (Make that image stream available to all the namespaces used for tests. This is required to allow the tests namespaces to fetch the images from the cnftests image stream.)

Suggestions for improvement: 
Add following RBAC rules
oc policy add-role-to-user system:image-puller system:serviceaccount:xt-u32-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:vrf-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:gatekeeper-testing:default --namespace=cnftests

oc policy add-role-to-user system:image-puller system:serviceaccount:ovs-qos-testing:default --namespace=cnftests

Comment 1 Sara Thomas 2021-08-04 17:19:58 UTC
Nikita, does this update begin with 4.8 or 4.7? 

Ready for QA, @xiuwang

Comment 2 Nikita 2021-08-04 17:45:21 UTC
It begins with 4.8.

Comment 3 Sara Thomas 2021-08-04 19:59:19 UTC
Oh, sorry I didn't put the GitHub PR link: https://github.com/openshift/openshift-docs/pull/35198

Comment 4 XiuJuan Wang 2021-08-05 07:50:30 UTC
Hi, I am not familiar with CNF test, maybe you need concact the cnf qe.
The docs updating the RBAC rules that I don't know what're used for.

Comment 5 Nikita 2021-08-05 13:05:12 UTC
It looks good. I move it to verify


Note You need to log in before you can comment on or make changes to this bug.