CCI-MOC
Add admin support to projects
Right now only the project bmi_infra is considered as admin project (Hardcoded). But, there could be multiple admin projects so the db must be updated to include this.
There is also the issue of bootstrapping BMI with the first admin project. I propose adding this project directly to the db during installation. (Will write another bootstrapping script).
@ravisantoshgudimetla we didn't complete are discussion regarding this. @apoorvemohan @naved001 @sirushtim your thoughts ?
Is there a reason BMI doesn't use the same RBAC/auth mechanism as HaaS/HIL and instead has a special shim layer for auth in the form of projects?
When we started on BMI it is a provisioning engine, setup on its own and projects etc are borrowed are from HIL(or some other network isolation tool), it didn't make sense to have auth mechanism of its own. This in a way has helped us define our boundaries, what it should do and what it shouldn't.
@ravisantoshgudimetla I see, so now that we have use cases in BMI that does require a full fledged auth service i.e upload/download of user images, would it make sense now to import the pluggable auth mechanism HIL uses? This would make it convenient for BMI to be just plugged into production ie wherever HIL is already used.
@chemistry-sourabh @ravisantoshgudimetla Would it be possible for you to join this discussion?
I usually will be WFH on Tuesdays and Thursday, so any of those days is fine, I can come over or we can have it over hangouts.