-
Notifications
You must be signed in to change notification settings - Fork 167
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
MR fixes identified during architecture review #3263
MR fixes identified during architecture review #3263
Conversation
backend/src/routes/api/modelRegistryRoleBindings/modelRegistryRolebindingsUtils.ts
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is more-or-less what I expected. Let me test it out
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Lgtm
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: andrewballantyne The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
a8497c9
to
8fdd544
Compare
New changes are detected. LGTM label has been removed. |
Signed-off-by: Mike Turley <mike.turley@alum.cs.umass.edu>
Signed-off-by: Mike Turley <mike.turley@alum.cs.umass.edu>
… due to requestSecurityGuard Signed-off-by: Mike Turley <mike.turley@alum.cs.umass.edu>
8fdd544
to
3b6b067
Compare
New changes are detected. LGTM label has been removed. |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #3263 +/- ##
==========================================
+ Coverage 84.96% 84.98% +0.01%
==========================================
Files 1302 1302
Lines 29101 29102 +1
Branches 7828 7828
==========================================
+ Hits 24727 24731 +4
+ Misses 4374 4371 -3
... and 4 files with indirect coverage changes Continue to review full report in Codecov by Sentry.
|
Followup to #3252 and #3249 as well as some misc discussion points from arch review (https://issues.redhat.com/browse/RHOAIENG-13439).
Description
backend/src/utils/route-security.ts
and rolebindings we create in MR settings include that namespace in the request body, creation of rolebindings failed due to the namespace checking inrequestSecurityGuard
. We do not want to modify route-security because it is a fragile workaround and modifying it involves high risk. The fix instead is to simply not include a namespace in the rolebinding object when we send it to the backend and instead inject it just before calling the cluster API.deleteModelRegistryAndSecret
util which means we weren't catching errors that came up in this deletion.frontend/src/api/pipelines/errorUtils.ts
, and it is needed because some requests in MR throw a NotReadyError which should be ignored by this handler. Removed the TODO comment.How Has This Been Tested?
Tested on modelregistry-ui cluster, we can now create rolebindings in MR settings again
Test Impact
N/A, no tests in the backend
Request review criteria:
Self checklist (all need to be checked):
If you have UI changes:
After the PR is posted & before it merges:
main