Details
-
Type:
Story
-
Status: To Do
-
Resolution: Unresolved
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Templates:customfield_11800 353588
-
Story Points:2.8
-
Epic Link:
-
Team:SQuaRE
Description
Currently a user on the lsst-sqre GH org and on the friends team only cannot login to Grafana.
t=2019-07-11T16:45:25+0000 lvl=info msg="Request Completed" logger=context userId=0 orgId=0 uname= method=GET path=/login/github status=302 remote_addr=10.42.0.35 time_ms=0 size=307 referer=https://test-grafana-efd.lsst.codes/login
|
t=2019-07-11T16:45:25+0000 lvl=info msg="state check" logger=oauth queryState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500 cookieState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500
|
t=2019-07-11T16:45:26+0000 lvl=eror msg="User not a member of one of the required teams" logger=context userId=0 orgId=0 uname=
|
We should use only lsst-sqre GH org for all the GH OAuth applications and add invite users to the lsst-sqre friends team.
Grafana, in particular, has a restriction on the GH org team and we should remove that or at least add both square and friends team_ids to that configuration.
https://github.com/lsst-sqre/terraform-efd/blob/master/charts/prometheus-operator.yaml#L106