Skip to content

[DRAFT] [ARO-22413] Remove use of local FP Authorizer to fix int env#4582

Draft
mrWinston wants to merge 1 commit intomasterfrom
ARO-22413-int-env-changes
Draft

[DRAFT] [ARO-22413] Remove use of local FP Authorizer to fix int env#4582
mrWinston wants to merge 1 commit intomasterfrom
ARO-22413-int-env-changes

Conversation

@mrWinston
Copy link
Collaborator

@mrWinston mrWinston commented Feb 3, 2026

Which issue this PR addresses:

Fixes ARO-22413

What this PR does / why we need it:

  • Bringing back int means we'll need to have the INT RP create clusters in a separate, RH-owned int subscription
  • This requires the use of a "mock" FP principal to grant the int RP access to the separate subscription.
  • The new "mock" FP principal however would node be able to access the RPs subscription, only the "remote" subscription where clusters are created
  • This means, we need to replace all uses of the FP credential in the local subscription with the MSI credentials which the RP already uses

Changes:

Test plan for issue:

  • Currently testing in int
  • will require canary deployment to make sure other environments are not affected by the change

Is there any documentation that needs to be updated for this PR?

  • tbd

How do you know this will function as expected in production?

  • tbd

@mrWinston mrWinston mentioned this pull request Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants