| Title | Kafka as a Service Solution Design - Team Provisioning Pipeline |
|---|---|
| Version | 4.0 |
| Approval Pull Request (PR) | PR158576 |
Solution Design - Team Provisioning Pipeline¶
Purpose & Scope¶
This Solution Design covers the Team Provisioning Pipeline, which onboards and sets up resources and permissions for teams using the platform. See Solution Designs section for an overview of the entire KaaS Solution.
Abbreviations and definitions¶
See Abbreviations and definitions
Solution Design Requirements¶
| ID | Name |
|---|---|
| 1 | Team Provisioning Pipeline |
Team Provisioning Pipeline¶
The Team Provisioning Pipeline will help automate the onboarding setup of;
- Group Mappings (Linking AD Groups to Confluent Cloud RBAC roles)
- Service Accounts (API keys)
- Identity pools (OIDC)
by setting up role bindings. The access management setup is described in Access Management
This is done in order to reduce the manual and tedious administration of setting up resource role bindings every time a new team or user needs to be onboarded to the platform, to increase flexibility and quality control to design specification, and reduce errors when working with sensitive and granular accesses to avoid configuration drift.
The code must be developed in a modular fashion, so it is easy to distinguish between functional and configuration changes. The Pipeline will utilize Terraform to deploy configuration defined in a /team specific folder in the GIT repository.
The pipeline is executed from Azure DevOps, and more detailed documentation can be found with the source code here access-mgmt-modules GIT
Traceability between Requirements¶
Traceability between Requirements (URS) and (SDR)¶
| ID | Work Item Type | URS (Status Dynamically Updated) | GIT SDR |
|---|---|---|---|
| 1445237 | URS | #1445237 | Solution Design Requirement: Team Provisioning Pipeline |
Change Log¶
| Version no. | CHG no. | Approved Pull Request | Date | Change Description |
|---|---|---|---|---|
| 1.0 | CHG0100614 | PR102951 | Date of acknowledgement | New document |
| 2.0 | CHG0100614 | PR111467 | Date of acknowledgement | Updated broken links |
| 3.0 | CHG0136055 | PR145250 | See PR | Updated source code repo links, as part of ADO resource Refactor CHG |
| 4.0 | CHG0139543 | PR158576 | See PR | Removed User onboarding and added AD group mapping |