Chapter 1. Enabling and giving access to the Role-Based Access Control (RBAC) feature
Chapter 1. Enabling and giving access to the Role-Based Access Control (RBAC) feature The Role-Based Access Control (RBAC) feature is disabled by default. Enable the RBAC plugin and declare policy administrators to start using RBAC features. The permission policies for users and groups in the Developer Hub are managed by permission policy administrators. Only permission policy administrators can access the Role-Based Access Control REST API. Prerequisites You have added a custom Developer Hub application configuration , and have sufficient permissions to modify it. You have enabled an authentication provider . Procedure The RBAC plugin is installed but disabled by default. To enable the ./dynamic-plugins/dist/janus-idp-backstage-plugin-rbac plugin, edit your dynamic-plugins.yaml with the following content. dynamic-plugins.yaml fragment plugins: - package: ./dynamic-plugins/dist/janus-idp-backstage-plugin-rbac disabled: false See Installing and viewing dynamic plugins . Declare policy administrators to enable a select number of authenticated users to configure RBAC policies through the REST API or Web UI, instead of modifying the CSV file directly. The permissions can be specified in a separate CSV file referenced in the app-config-rhdh ConfigMap, or permissions can be created using the REST API or Web UI. To declare users such as <your_policy_administrator_name> as policy administrators, edit your custom Developer Hub ConfigMap, such as app-config-rhdh , and add following code to the app-config-rhdh.yaml content: app-config.yaml fragment permission: enabled: true rbac: admin: users: - name: user:default/ <your_policy_administrator_name> Verification Sign out from the existing Red Hat Developer Hub session and log in again using the declared policy administrator account. With RBAC enabled, most features are disabled by default. Navigate to the Catalog page in RHDH. The Create button is not visible. You cannot create new components. Navigate to the API page. The Register button is not visible. steps Explicitly enable permissions to resources in Developer Hub.
plugins: - package: ./dynamic-plugins/dist/janus-idp-backstage-plugin-rbac disabled: false permission: enabled: true rbac: admin: users: - name: user:default/ <your_policy_administrator_name>