OpenLiberty / open-liberty-operator

Eclipse Public License 2.0
28 stars 36 forks source link

Enhancements for deploying InstantOn applications #525

Open leochr opened 7 months ago

leochr commented 7 months ago

Enhancements in Liberty Operator to make it easy to deploy and manage InstantOn applications (i.e. security context configuration, SCC/service account setup)

leochr commented 5 months ago

@mtamboli This is the Epic I mentioned during our call today. This would be a good place to capture any feedback from SVT testing to enhance user experiences for deploying and managing InstantOn applications with Liberty Operator. Thank you

vijaysun-omr commented 4 days ago

@leochr https://ideas.ibm.com/ideas/LIBERTY-I-137 is the RFE from an interested InstantOn customer, Riyad Bank for this feature.

fyi @tjwatson

leochr commented 4 days ago

@vijaysun-omr Thank you for passing on the RFE . I'm happy to get confirmation from a customer that the Service Account configuration for InstantOn we plan to support would be beneficial.

As discussed in the meeting, we also plan to support the necessary security context settings at the application deployment level. We can't support the creation of SCC itself as that's a cluster-level resource which requires elevated permissions. But it's something a cluster admin would only have to do once per cluster. In addition, we also plan to investigate anything the Liberty Operator can help with at the Knative/serverless level to make it easy to deploy InstantOn applications.

leochr commented 4 days ago

@mtamboli Please share any feedback/suggestions to improve user experience based on your team's experience with testing InstantOn applications.

Also, any documents/test plans/steps on testing InstantOn applications would be helpful to both Liberty Operator and InstantOn teams. Thank you.