Unable to Edit Service Overrides on an Environment
planned
T
Thoughtful Locust
Team is interested in using the Infrastructure Overrides and Overrides 2.0 feature. They believe it will solve the management problem.
The concern is now the access problem, they don't want to provide developers access to the overrides.
Right now they get access to service and environment which inherintly gives them access to manipulate overrides.
Log In
Canny AI
Merged in a post:
Needed resourse constraints on Override Variable
G
Gold Coyote
We wanted to access constraints on Environment wise Override variables.
Just wanted to know, is it possible for adding access for read and Write on Overridden variables.
Canny AI
Merged in a post:
Needed an ability to edit File Store files and service override from the Environment page
K
Kelp Tortoise
Needed an ability to see and edit the service override from environment itself.
Currently, the inability to edit Service Overrides directly from the Environment is causing significant toil. The process involves clicking into the service, opening a new File Store tab, finding the file to edit, and then going back to review it in the Environment. This repetitive task, spanning multiple places, results in an unfavorable user experience.
I would like to request an enhancement that allows users to seamlessly edit and view Service Overrides directly from the Environment. This would eliminate the need for multiple tabs, streamlining the workflow and contributing to a more efficient and user-friendly experience.
Rohan Gupta
Merged in a post:
RBAC with Service and Environment Overrides
R
Representative Llama
Current access control and OPA can be better than CG, however, these improvement would make it much better I believe, and it would allow us to have more control granular control on the various objects.
Service and Env Overrides:
Restrict user to change service-related changes (default variables, overrides, manifest script) but need not able to update the env or infradef or any other resource of the project.
Shylaja Sundararajan
Hi Sudesh
Currently users with Environment update access will be able to create overrides. For Service overrides , Service update access is required .
Is the ask to have a seperate permissions for override creations
Regards
Shylaja
Shylaja Sundararajan
Hi Raj,
As discussed , following is the summary of the requirements
- current permissions of Account level Environment Edit can also Edit Overrides will not be sufficient . This would lead to update of Environments . Hence this is not preferred
2.Individual Read/Create /Edit /Delete is required for Overrides and assigned to Usergroups.
- RBAC is not needed for diff service configurations
Regards
Shylaja
Shylaja Sundararajan
Hi Raj,
Could you please share additional details on if seperate RBAC is needed for different configurations of the Service
Regards
Shylaja
R
Representative Llama
Shylaja Sundararajan: By diff config of service, you mean custom remote manifest fetch script or artifact config things?! if so, we can live with the common CRUD for all those things related to services.
However, if it means Override vars as well, then for those we need separate rbac.
If we can define RBAC on some var keys that would be much better. i.e. Only admins have access to change the SkipCanary var per service. If this goes as separate ticket then it is fine, we can have it.
Shylaja Sundararajan
planned