Project Role updates(Inheritance) with Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher 2. Create a user user1 3. Create a downstream cluster cluster1 4. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments) 6. Update role1 and add Inherit role2 to role1 7. Downstream cluster : create a project (proj1) 8. Create a namespace ns1 9. Add user1 and role1 to the project proj1 10. Login with user1 in a different browser
a. Admin login : Update role2 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Admin login : Update role2 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_2
1. Provision Rancher 2. Create a user user1 3. Create a downstream cluster cluster1 4. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments) 6. Update role1 and add Inherit role2 to role1 7. Downstream cluster : create a project (proj1) 8. Create a namespace ns1 9. Add user1 and role1 to the project proj1 10. Login with user1 in a different browser
a. Admin login : Update role1 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Admin login : Update role1 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_3
Project Role updates(Inheritance) with Restricted Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher 2. Create a user user1 3. Create a downstream cluster cluster1 4. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments) 6. Update role1 and add Inherit role2 to role1 7. Downstream cluster : create a project (proj1) 8. Create a namespace ns1 9. Add user1 and role1 to the project proj1 10. Login with user1 in a different browser
a. Restricted Admin login : Update role2 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Restricted Admin login : Update role2 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_4
1. Provision Rancher 2. Create a user user1 3. Create a downstream cluster cluster1 4. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments) 6. Update role1 and add Inherit role2 to role1 7. Downstream cluster : create a project (proj1) 8. Create a namespace ns1 9. Add user1 and role1 to the project proj1 10. Login with user1 in a different browser
a. Restricted Admin login : Update role1 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Restricted Admin login : Update role1 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_5
Project Role updates(Multi Inheritance) with Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher 2. Create a user user1 3. Create a downstream cluster cluster1 4. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments) 6. Create a Project role role3 (verb:get & resources : DaemonSet) 7. Update role1 and add Inherit role2 to role1 8. Update role2 and add Inherit role3 to role1 9. Downstream cluster : create a project (proj1) 10. Create a namespace ns111. Add user1 and role3 to the project proj112. Login with user1 in a different browser
a. Admin login : Update role1 by adding (verb:Create & resources : Secrets)Make sure User1 login should see the above role1 changesb. b. Admin login : Update role2 by adding (verb:Create & resources : Services) Make sure User1 login should see the above role2 changes c. Admin login : Update role3 by adding (verb:Create & resources : Limit Ranges)Make sure User1 login should see the above role1 changes
TC_6
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Project role role1 (verb:create & resources : configmaps) 5. Create a Project role role2 (verb:get & resources : Deployments)6. Create a Project role role3 (verb:get & resources : DaemonSet)7. Update role1 and add Inherit role2 to role18. Update role2 and add Inherit role3 to role19. Downstream cluster : create a project (proj1)10. Create a namespace ns111. Add user1 and role3 to the project proj112. Login with user1 in a different browser
a. Admin login : Update role1 by delete (verb:Delete & resources : Secrets) Make sure User1 login should see the above role1 changesb. Admin login : Update role2 by deleting (verb:Delete & resources : Services) Make sure User1 login should see the above role2 changesc. Admin login : Update role3 by deleting (verb:Delete & resources : Limit Ranges) Make sure User1 login should see the above role1 changes
TC_7
Cluster Role updates(Inheritance) with Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Update role1 and add Inherit role2 to role17. Downstream cluster : create a project (proj1)8. Create a namespace ns19. Add user1 and role1 to the cluster cluster110. Login with user1 in a different browser
a. Admin login : Update role2 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Admin login : Update role2 by deleting (verb:Delete & resources : Deployments)Make sure User1 login should see the above role2 changes
TC_8
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Update role1 and add Inherit role2 to role17. Downstream cluster : create a project (proj1)8. Create a namespace ns19. Add user1 and role1 to the cluster cluster110. Login with user1 in a different browser
a. Admin login : Update role1 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Admin login : Update role1 by deleting (verb:Delete & resources : Deployments)Make sure User1 login should see the above role2 changes
TC_9
Cluster Role updates(Inheritance) with Restricted Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Update role1 and add Inherit role2 to role17. Downstream cluster : create a project (proj1)8. Create a namespace ns19. Add user1 and role1 to the cluster cluster110. Login with user1 in a different browser
a. Restricted Admin login : Update role2 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Restricted Admin login : Update role2 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_10
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Update role1 and add Inherit role2 to role17. Downstream cluster : create a project (proj1)8. Create a namespace ns19. Add user1 and role1 to the cluster cluster110. Login with user1 in a different browser
a. Restricted Admin login : Update role1 by adding (verb:Create & resources : DaemonSets) Make sure User1 login should see the above role2 changes a. Restricted Admin login : Update role1 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
TC_11
Cluster Role updates(Multi Inheritance) with Admin should propagate to Downstream cluster for a standard user
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Create a Cluster role role3 (verb:get & resources : DaemonSet)7. Update role1 and add Inherit role2 to role18. Update role2 and add Inherit role3 to role19. Downstream cluster : create a project (proj1)10. Create a namespace ns111. Add user1 and role3 to the cluster cluster112. Login with user1 in a different browser
a. Admin login : Update role1 by adding (verb:Create & resources : Secrets) Make sure User1 login should see the above role1 changesb. Admin login : Update role2 by adding (verb:Create & resources : Services) Make sure User1 login should see the above role2 changesc. Admin login : Update role3 by adding (verb:Create & resources : Limit Ranges) Make sure User1 login should see the above role1 changes
TC_12
1. Provision Rancher2. Create a user user13. Create a downstream cluster cluster14. Create a Cluster role role1 (verb:create & resources : configmaps)5. Create a Cluster role role2 (verb:get & resources : Deployments)6. Create a Cluster role role3 (verb:get & resources : DaemonSet)7. Update role1 and add Inherit role2 to role18. Update role2 and add Inherit role3 to role19. Downstream cluster : create a project (proj1)10. Create a namespace ns111. Add user1 and role3 to the cluster cluster112. Login with user1 in a different browser
a. Admin login : Update role1 by delete (verb:Delete & resources : Secrets) Make sure User1 login should see the above role1 changesb. Admin login : Update role2 by deleting (verb:Delete & resources : Services) Make sure User1 login should see the above role2 changesc. Admin login : Update role3 by deleting (verb:Delete & resources : Limit Ranges) Make sure User1 login should see the above role1 changes
samjustus
commented
11 months ago
Test Plan :
2. Create a user user1
3. Create a downstream cluster cluster1
4. Create a Project role role1 (verb:create & resources : configmaps)
5. Create a Project role role2 (verb:get & resources : Deployments)
6. Update role1 and add Inherit role2 to role1
7. Downstream cluster : create a project (proj1)
8. Create a namespace ns1
9. Add user1 and role1 to the project proj1
10. Login with user1 in a different browser
a. Admin login : Update role2 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
2. Create a user user1
3. Create a downstream cluster cluster1
4. Create a Project role role1 (verb:create & resources : configmaps)
5. Create a Project role role2 (verb:get & resources : Deployments)
6. Update role1 and add Inherit role2 to role1
7. Downstream cluster : create a project (proj1)
8. Create a namespace ns1
9. Add user1 and role1 to the project proj1
10. Login with user1 in a different browser
a. Admin login : Update role1 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
2. Create a user user1
3. Create a downstream cluster cluster1
4. Create a Project role role1 (verb:create & resources : configmaps)
5. Create a Project role role2 (verb:get & resources : Deployments)
6. Update role1 and add Inherit role2 to role1
7. Downstream cluster : create a project (proj1)
8. Create a namespace ns1
9. Add user1 and role1 to the project proj1
10. Login with user1 in a different browser
a. Restricted Admin login : Update role2 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
2. Create a user user1
3. Create a downstream cluster cluster1
4. Create a Project role role1 (verb:create & resources : configmaps)
5. Create a Project role role2 (verb:get & resources : Deployments)
6. Update role1 and add Inherit role2 to role1
7. Downstream cluster : create a project (proj1)
8. Create a namespace ns1
9. Add user1 and role1 to the project proj1
10. Login with user1 in a different browser
a. Restricted Admin login : Update role1 by deleting (verb:Delete & resources : Deployments) Make sure User1 login should see the above role2 changes
2. Create a user user1
3. Create a downstream cluster cluster1
4. Create a Project role role1 (verb:create & resources : configmaps)
5. Create a Project role role2 (verb:get & resources : Deployments)
6. Create a Project role role3 (verb:get & resources : DaemonSet)
7. Update role1 and add Inherit role2 to role1
8. Update role2 and add Inherit role3 to role1
9. Downstream cluster : create a project (proj1)
10. Create a namespace ns111. Add user1 and role3 to the project proj112. Login with user1 in a different browser
b. Admin login : Update role2 by adding (verb:Create & resources : Services) Make sure User1 login should see the above role2 changes
c. Admin login : Update role3 by adding (verb:Create & resources : Limit Ranges)Make sure User1 login should see the above role1 changes