harness-community / solutions-architecture

A collection of resources and best practices for operating Harness at scale

solutions-architecture

solutions-architecture's Issues

Automatically create roles and groups based most common personas

We should have modules that give us a good starting point with RBAC for the most common personas. Here's just a few ideas:

Harness Admin: Full access to all of Harness features.
Pipeline Engineer: Ability to create and edit pipelines and templates.
Product Owner: Ability to created and edit dashboards, access deployment details.
Application Developer: Can execute non-prod deployments. Optionally scoped to a specific project.
Release Manager: Can execute or approve production deployments. Optionally scoped to a specific project.

Not sure if this should live in this repo as a module or if we should move to one of the other existing terraform module repos.

We need a more detailed description of what `harness-ci-factory` does

In the readme it just says:

A collection of Terraform resources centered around the implementation of the Harness CI Factory Pipeline to support managing Harness CI Container Images

If I understand this correctly it makes it easy for people to pull all the required images down, rebuild them, and then publish them to the specified internal docker repository.

https://github.com/harness-community/solutions-architecture/tree/main/harness-ci-factory

TOPIC