Uploaded image for project: 'OpenShift Container Platform (OCP) Strategy'
  1. OpenShift Container Platform (OCP) Strategy
  2. OCPSTRAT-469

Install and upgrade OpenShift with GCP Workload Identity

    XMLWordPrintable

Details

    • False
    • Hide

      None

      Show
      None
    • False
    • 100
    • 100% 100%
    • 0
    • 0

    Description

      OCP/Telco Definition of Done
      Feature Template descriptions and documentation.
      Feature Overview

      • Connect OpenShift workloads to Google services with Google Workload Identity

      Goals

      • Customers want to be able to manage and operate OpenShift on Google Cloud Platform with workload identity, much like they do with AWS + STS or Azure + workload identity.
      • Customers want to be able to manage and operate operators and customer workloads on top of OCP on GCP with workload identity.

      Requirements

      • Add support to CCO for the Installation and Upgrade using both UPI and IPI methods with GCP workload identity.
      • Support install and upgrades for connected and disconnected/restriction environments.
      • Support the use of Operators with GCP workload identity with minimal friction.
      • Support for HyperShift and non-HyperShift clusters.
      • This Section:* A list of specific needs or objectives that a Feature must deliver to satisfy the Feature.. Some requirements will be flagged as MVP. If an MVP gets shifted, the feature shifts. If a non MVP requirement slips, it does not shift the feature.
      Requirement Notes isMvp?
      CI - MUST be running successfully with test automation This is a requirement for ALL features. YES
      Release Technical Enablement Provide necessary release enablement details and documents. YES

      (Optional) Use Cases

      This Section:

      • Main success scenarios - high-level user stories
      • Alternate flow/scenarios - high-level user stories
      • ...

      Questions to answer…

      • ...

      Out of Scope

      • …

      Background, and strategic fit

      This Section: What does the person writing code, testing, documenting need to know? What context can be provided to frame this feature.

      Assumptions

      • ...

      Customer Considerations

      • ...

      Documentation Considerations

      Questions to be addressed:

      • What educational or reference material (docs) is required to support this product feature? For users/admins? Other functions (security officers, etc)?
      • Does this feature have doc impact?
      • New Content, Updates to existing content, Release Note, or No Doc Impact
      • If unsure and no Technical Writer is available, please contact Content Strategy.
      • What concepts do customers need to understand to be successful in [action]?
      • How do we expect customers will use the feature? For what purpose(s)?
      • What reference material might a customer want/need to complete [action]?
      • Is there source material that can be used as reference for the Technical Writer in writing the content? If yes, please link if available.
      • What is the doc impact (New Content, Updates to existing content, or Release Note)?

       

      Attachments

        Issue Links

          depends on

          Feature - Capability or a well-defined set of functionality that delivers business value. Features can include additions or changes to existing functionality. Features can easily span multiple teams, and potentially multiple releases. OCPSTRAT-243 Custom roles for GCP Workload Identity

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is depended on by

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. HIVE-2262 [OSD-GCP]: Hive changes for supporting GCP Workload Identity Federation (WIF)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is related to

          Feature Request - Feature requests from customers and/or users RFE-2046 Support for GCP Workload Identity Federation

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Accepted

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. CCO-197 Document ccoctl permissions needed when using GCP workload identity

          • Undefined - Priority not specified.
          • To Do

          Bug - A problem that impairs or prevents the functions of the product. CCO-260 invalid_grant error in the image-registry operator on GCP using WIF

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. CCO-179 run aws pod-identity and gcp workload-identity periodics

          • Undefined - Priority not specified.
          • Closed

          Outcome - Organizational objective focused on a measurable outcome. May be in support of larger strategic goals. OCPSTRAT-6 Tokenized Auth Enablement for OLM-managed Operators on Cloud Providers

          • Critical - To be worked on immediately following BLOCKER issues.
          • In Progress
          relates to

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. CORS-2361 Deploy disconnected OpenShift cluster with Workload Identity on Google Cloud

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          Web Link Steps to install an OpenShift Cluster with Workload Identity

          Activity

            People

              mak.redhat.com Marcos Entenza Garcia
              julim Ju Lim
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: