Skip to content

[patch] MAS and Manage RBAC Permissions in Install pipeline#2248

Open
unnati-solanki-git wants to merge 42 commits into
masterfrom
rbac-permissions
Open

[patch] MAS and Manage RBAC Permissions in Install pipeline#2248
unnati-solanki-git wants to merge 42 commits into
masterfrom
rbac-permissions

Conversation

@unnati-solanki-git
Copy link
Copy Markdown
Contributor

@unnati-solanki-git unnati-solanki-git commented May 6, 2026

@unnati-solanki-git unnati-solanki-git changed the title [patch] Updating permissions for install pipeline [patch] MAS and Manage RBAC Permissions in Install pipeline May 7, 2026
@unnati-solanki-git unnati-solanki-git marked this pull request as ready for review May 7, 2026 15:15
@unnati-solanki-git unnati-solanki-git requested a review from a team as a code owner May 7, 2026 15:15
echo "For help reviewing the content of the must gather refer to:"
echo "https://www.ibm.com/support/pages/how-review-maximo-application-suite-must-gather"

if [ "$(oc whoami 2>/dev/null)" == "" ] ; then
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Even if we don't require use to be a cluster admin (second check), we still want the first check (that they are logged into the cluster) ?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

Comment thread rbac/install/pipeline/clusterrole.yaml Outdated
- kind: ServiceAccount
name: mas-{{ mas_instance_id }}-install-pipeline
namespace: mas-{{ mas_instance_id }}-pipelines
- kind: ServiceAccount
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why do we need to bind to this service account as well?

If user is using the OOTB "pipeline" account it means they have chosen to go for the "just set me up the default account with cluster admin permissions still doesn't it?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the noticing! This was added to test must-gather related changes, but forgot to clean up. Removed now!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants