Skip to content

Conversation

@dockerymick
Copy link
Contributor

No description provided.




- You can now enable the `validate` specification to check the accuracy of your `Role` and `ClusterRole` resources. For more information, see link:../secure_clusters/cluster_val.adoc#enable-cluster-val[Enabling validation for cluster permissions].
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the word accuracy doesn't make sense here. The validate feature just checks if the Role or ClusterRole exists. So can we change accuracy to existence? Thanks!

[#enable-cluster-val]
= Enabling validation for cluster permissions

Enable the `validate` specification within your `ClusterPermission` resources to check the accuracy of your `Role` and `ClusterRole` resources.
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as the comment above. Change accuracy to existence.

Copy link
Collaborator

@jc-berger jc-berger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@@ -0,0 +1,52 @@
[#enable-cluster-val]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should change this file name to cluster_permission_validate.adoc --- this can get confused with cluster lifecycle, meaning "cluster validation" and the val can get confused with "value" -- it's one of those cases where we need the three word file name.

@openshift-ci openshift-ci bot removed the lgtm label Nov 10, 2025
@xiangjingli
Copy link
Contributor

/lgtm

@xiangjingli
Copy link
Contributor

@dockerymick It looks good to me. FYI @fxiang1 is the dev owner of this feature. I noticed his comments have been addressed. It would be better to let Feng double review it.

@dockerymick
Copy link
Contributor Author

@xiangjingli sure thing! Thank you!

@fxiang1
Copy link

fxiang1 commented Nov 12, 2025

/lgtm

Thanks @dockerymick !

@openshift-ci
Copy link

openshift-ci bot commented Nov 12, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dockerymick, fxiang1, jc-berger, swopebe, xiangjingli

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dockerymick
Copy link
Contributor Author

Thanks everyone! Merging

@dockerymick dockerymick merged commit 3819b8d into 2.15_stage Nov 12, 2025
1 of 2 checks passed
@dockerymick dockerymick deleted the mj-ACM-23588 branch November 12, 2025 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants