Skip to content

Commit 28c1c26

Browse files
committed
Update access arguments for the ml pipelines UI
I discovered an issue where users require cluster admin in order to be able to access the ML Pipelines UI. Only view (or similar) level permissions should be required on the namespace. This change modifies the parameters for the ml pipelines oauth proxy to match what we're using now in other pods in the ODH.
1 parent 205093e commit 28c1c26

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

manifests/opendatahub/overlays/ds-pipeline-ui/deployments/ds-pipeline-ui.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,7 @@ spec:
2828
- --tls-cert=/etc/tls/private/tls.crt
2929
- --tls-key=/etc/tls/private/tls.key
3030
- --cookie-secret=SECRET
31-
- '--openshift-delegate-urls={"/": {"resource": "route", "verb": "get", "name": "ds-pipeline-ui"}}'
32-
- '--openshift-sar={"resource": "route", "resourceName": "ds-pipeline-ui", "verb": "get"}'
31+
- '--openshift-delegate-urls={"/": {"resource": "services", "verb": "get", "name": "ml-pipeline-ui"}}'
3332
- --skip-auth-regex='(^/metrics|^/apis/v1beta1/healthz)'
3433
image: registry.redhat.io/openshift4/ose-oauth-proxy:v4.8
3534
ports:

0 commit comments

Comments
 (0)