BCDevOps / developer-experience

This repository is used to track all work for the BCGov Platform Services Team (This includes work for: 1. Platform Experience, 2. Developer Experience 3. Platform Operations/OCP 3)
Apache License 2.0
8 stars 17 forks source link

Setup new advsol private repository in Artifactory for use by Platform Operations team #4245

Closed wmhutchison closed 11 months ago

wmhutchison commented 12 months ago

Describe the issue Due to a change with respect to processes involving how software supporting NSX-based Openshift clusters is being handled, we need a proper home to place proprietary images downloaded from VMWare into a location accessible by all (existing and new builds) Openshift clusters. This ticket thus tracks the request to add an "advsol" private repository with additional token access details specified below.

Additional context If possible, the ideal setup for access to the "advsol" private repository would be with three accounts.

How does this benefit the users of our platform? This removes previous processes which created artificial bottlenecks involving individuals whose time is quite scarce (Platform Operations team lead) and thus delegates the responsibility and access to the Platform Operations team members instead.

Definition of done

wmhutchison commented 11 months ago

@caggles Do let me know if it will be viable to get this request fulfilled by the end of this week, and if not, when it can be expected to be fulfilled so I can update plans for other things accordingly. :)

wmhutchison commented 11 months ago

A technical issue was identified by Steven Barre regarding the original solution in that all of the Openshift clusters already have a global pull secret in place for Artifactory, thus would pre-empt attempts to use the new credentials.

A follow-up meeting and discussion took place later today, with the net result that a new repo (cluster-docker-local) would be created, and read privileges granted to all of the existing Openshift credentials already in place. Platform Ops' github access would be enabled for that repo so we can still login and generate an access token when we need to upload new images/etc.

Have tested successfully this new setup, so closing this ticket.