maintain-kubeusers: Remove admin access from users removed from tools.admin
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• taavi
	May 12 2021, 6:49 PM

Description

When a user is removed from tools.admin, their admin access to the kubernetes cluster should be automatically revoked

Related Objects

Mentioned In: T282738: Alert on CrashLoopBackOff in Toolforge infrastructure pods
Mentioned Here: T285011: Add process to stop and disable k8s jobs for disabled tools

Event Timeline

• taavi created this task.May 12 2021, 6:49 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 12 2021, 6:49 PM

Mentioned in SAL (#wikimedia-cloud) [2021-05-12T19:03:51Z] <bstorm> deleted phamhi from admin configmap in maintain-kubeusers T282725

Mentioned in SAL (#wikimedia-cloud) [2021-05-12T19:04:18Z] <bstorm> deleted the maintain-kubeusers pod to get it up and running fast T282725

Mentioned in SAL (#wikimedia-cloud) [2021-05-12T19:05:26Z] <Majavah> remove phamhi-binding phamhi-view-binding cluster role bindings T282725

• taavi mentioned this in T282738: Alert on CrashLoopBackOff in Toolforge infrastructure pods.May 12 2021, 7:38 PM

Mentioned in SAL (#wikimedia-cloud) [2021-05-22T14:32:16Z] <majavah> manually remove valhallasw yuvipanda admin certificates and from configmap and restart maintain-kubeusers pod T282725

Mentioned in SAL (#wikimedia-cloud) [2021-05-22T14:47:31Z] <majavah> manually remove jeh admin certificates and from maintain-kubeusers configmap T282725

This was fixed in T285011: Add process to stop and disable k8s jobs for disabled tools

maintain-kubeusers: Remove admin access from users removed from tools.adminClosed, ResolvedPublicActions

Description

Related Objects

Event Timeline

maintain-kubeusers: Remove admin access from users removed from tools.admin
Closed, ResolvedPublic
Actions