Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Few Problems related to INC2004642 #425

Open
jSylvestre opened this issue Aug 7, 2024 · 2 comments
Open

Few Problems related to INC2004642 #425

jSylvestre opened this issue Aug 7, 2024 · 2 comments
Assignees
Labels
bug Something isn't working

Comments

@jSylvestre
Copy link
Member

User was able to submit request without a PI or Access type.
I was able to do it without a PI on test with a create account.
This was for: Add Account To Group

But... Looking at the group for that account, it is {
"uid": 1359144,
"gid": 1359144,
"groups": [
"ecl243grp"
],
"shell": "/bin/bash",
"ensure": "present",
"storage": {
"zfs": false,
"autofs": {
"nas": "nas-12-3",
"path": "/nas-12-3/adamgrp/5/"
}
}
}

Account email starts with tburnha

And that group isn't in the DB

@jSylvestre jSylvestre added the bug Something isn't working label Aug 7, 2024
@sprucely
Copy link
Contributor

Group ecl243grp doesn't have any sponsors, so it's not supposed to be synced to Hippo.

@sprucely
Copy link
Contributor

  • PI was a field requested by only one cluster. To avoid cluster-specific customization, we made that an optional input. Should we instead make it required for all clusters or add another cluster configuration option?
  • As currently structured, it wouldn't make sense to have Access Type as an option when adding an account to another group. Access Type is account-specific in Hippo, not group-specific. Is that wrong?
  • Another problem with Access Type is that it's not synced from Puppet, and I'm not sure if there is an obvious way to do that. Until that's possible the only thing we could do is pull AccessType from QueuedEvent once it is marked as completed, just like we do with SshKey. But that still leaves us with the problem of having no AccessType info for accounts that were created outside of Hippo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants