Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Update clustermanager API spec for auto approval identities #357

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

jeffw17
Copy link

@jeffw17 jeffw17 commented Feb 6, 2025

Summary

We want to add a new field in the RegistrationHubConfiguration for clustermanager to store AutoApprovalIdentities for both CSR and AWSIRSA auth type.

Related issue(s)

Fixes # #514 and #822

@openshift-ci openshift-ci bot requested review from mdelder and qiujian16 February 6, 2025 16:32
Copy link
Contributor

openshift-ci bot commented Feb 6, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: jeffw17
Once this PR has been reviewed and has the lgtm label, please assign deads2k for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link
Member

@mikeshng mikeshng left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Type: "FieldValueRequired",
Message: "Required value: this property is in x-kubernetes-list-map-keys, so it must have a default or be a required property",
Field: "spec.validation.openAPIV3Schema.properties[spec].properties[registrationConfiguration].properties[autoApprovalIdentities].items.properties[driver].default",

RegistrationDrivers didn't have this issue so maybe use that as reference.

@jeffw17 jeffw17 force-pushed the feature/auto-approval-registration branch 2 times, most recently from 92ff577 to 9492e04 Compare February 6, 2025 22:42
@jeffw17 jeffw17 force-pushed the feature/auto-approval-registration branch from 9492e04 to ec28f1b Compare February 6, 2025 22:46
@qiujian16
Copy link
Member

/assign @skeeey @xuezhaojun

@skeeey
Copy link
Member

skeeey commented Feb 7, 2025

We may need to mark the autoApproveUsers to Deprecated

// +kubebuilder:validation:Enum=csr;awsirsa
Driver string `json:"driver,omitempty"`

// Identities represent a list of users in which we will allow to join with hub cluster
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

may need more comments here

  • for csr driver, the identities represent a list of users ...
  • for awsirsa driver, the identities represent a list of arns ...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants