solo-io / gloo-portal-issues

Public tracker for issues related to Gloo Portal
https://docs.solo.io/gloo-portal/latest/
1 stars 3 forks source link

Can not grant access to all API Products and usage plans to Portal Admin Group using wildcard #155

Open byrdog55 opened 2 years ago

byrdog55 commented 2 years ago

As a Portal Admin group member, I want to be able to access all usage plans and all API Products in an environment. The following fields in Group CRD group.portal.gloo.solo.io/v1beta1 do not seem to support wildcard '*'

  • spec.accessLevel.apis[].products.names[]
  • spec.accessLevel.apis[].products.namespaces[]
  • spec.accessLevel.apis[].usagePlans[] (Though the documentation https://docs.solo.io/gloo-portal/latest/reference/api/access_level/#portal.gloo.solo.io.AccessLevel says usagePlan supports *, it did not work for me)

Here is Group CR

apiVersion: portal.gloo.solo.io/v1beta1
kind: Group
metadata:
name: cme-admin-group
namespace: cme-gloo
spec:
accessLevel:
apis:
- environments:
names:
- sandbox-env
namespaces:
- cme-gloo
products:
names:
- '*'
namespaces:
- '*'
usagePlans:
- '*'
portals:
- name: sandbox-portal
namespace: cme-gloo
description: CME Admin Group
displayName: cme-admin-group
oidcGroup:
groupName: CME-ADMIN

Attached environment and portal yaml. Note the usagePlan is added in APIProduct resource. Usage plan is not overridden in Environment resource for the APIProduct.


byrdog55 commented 2 years ago
Comment from Zendesk:
Zendesk: 473 linked successfully.
soloio-bot commented 2 years ago

Zendesk ticket #473 has been linked to this issue.