Skip to content

OSDOCS-19838: add external id feature#112301

Merged
jldohmann merged 1 commit into
openshift:mainfrom
jldohmann:OSDOCS-19557
May 29, 2026
Merged

OSDOCS-19838: add external id feature#112301
jldohmann merged 1 commit into
openshift:mainfrom
jldohmann:OSDOCS-19557

Conversation

@jldohmann jldohmann added this to the Continuous Release milestone May 26, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label May 26, 2026
@openshift-ci-robot
Copy link
Copy Markdown

openshift-ci-robot commented May 26, 2026

@jldohmann: This pull request references OSDOCS-19838 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Version(s): 4.21+

Issue: https://redhat.atlassian.net/browse/OSDOCS-19838

Link to docs preview:

QE review:

  • QE has approved this change.

Additional information:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 26, 2026
Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
@jldohmann jldohmann force-pushed the OSDOCS-19557 branch 6 times, most recently from 6b71543 to 38fb2c5 Compare May 26, 2026 23:52
Comment thread modules/rosa-hcp-sts-external-id.adoc
@jldohmann jldohmann force-pushed the OSDOCS-19557 branch 4 times, most recently from bd88ddb to fc9948f Compare May 27, 2026 19:28
Comment thread modules/rosa-hcp-creating-account-wide-sts-roles-and-policies.adoc Outdated
Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
@jldohmann jldohmann force-pushed the OSDOCS-19557 branch 2 times, most recently from c62e57c to 84e24e1 Compare May 27, 2026 19:47
Copy link
Copy Markdown
Contributor

@bhardesty bhardesty left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks great! I just had a couple tiny suggestions.

Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
Comment thread modules/rosa-hcp-sts-external-id.adoc Outdated
Comment thread modules/rosa-prereq-roles-overview.adoc Outdated
@@ -35,6 +35,11 @@ For {product-title} clusters, you must create the following account-wide roles a

|===
+
[IMPORTANT]
====
For enhanced security, it is recommended to include an external ID within the trust policies of the Support and Installer account-wide roles. For more information, see _About external ID_.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion: if RH recommends something, just tell users to do it.

Suggested change
For enhanced security, it is recommended to include an external ID within the trust policies of the Support and Installer account-wide roles. For more information, see _About external ID_.
For enhanced security, include an external ID within the trust policies of the Support and Installer account-wide roles. For more information, see _About external ID_.

Also, is the xref to "About external ID" missing? I don't see it as a section or additional resource in this module or its parent assembly.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's a module, so i did not put an xref in there. in the parent assembly, the new concept module About external ID is the one following this module, so i didn't include it as an additional resource either

@jldohmann jldohmann added the peer-review-done Signifies that the peer review team has reviewed this PR label May 29, 2026
@jldohmann
Copy link
Copy Markdown
Contributor Author

SME feedback provided by Aaren and Michael via slack

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 29, 2026

@jldohmann: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jldohmann jldohmann merged commit 5eb7f99 into openshift:main May 29, 2026
2 checks passed
@jldohmann
Copy link
Copy Markdown
Contributor Author

/cherrypick enterprise-4.22

@jldohmann
Copy link
Copy Markdown
Contributor Author

/cherrypick enterprise-4.21

@openshift-cherrypick-robot
Copy link
Copy Markdown

@jldohmann: new pull request created: #112533

Details

In response to this:

/cherrypick enterprise-4.22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-cherrypick-robot
Copy link
Copy Markdown

@jldohmann: new pull request created: #112534

Details

In response to this:

/cherrypick enterprise-4.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@jldohmann jldohmann deleted the OSDOCS-19557 branch May 29, 2026 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch/enterprise-4.21 branch/enterprise-4.22 jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. peer-review-done Signifies that the peer review team has reviewed this PR size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants