Projects

[edit on GitHub]

Overview

Identity and Access Management projects allow for filtering and segregation of your data among your user base.

Permission for the iam:projects action is required to interact with projects.

Managing Projects

Creating Projects

Navigate to Projects in the Settings tab. Then use the Create Project button, which opens a dialog box for entering the project’s Name. A project ID automatically generates upon creation. If you would like to change the project ID, use the Edit ID button.

When a project is created, three policies that control access to that project are also created. Those policies include: Project Owner, Project Editor, and Project Viewer. Adding members to these policies will grant them access to the project.

Deleting Projects

Only projects with zero ingest rules and no pending edits can be deleted. To delete a project, navigate to Projects in the Settings tab. Then open the menu at the end of the table row and select Delete Role.

Changing Project Details

Ingest Rules

Ingest rules allow ingested events and nodes to be added to projects. Node corresponds to ingested client run and compliance nodes, and Event corresponds to ingested events on the Event Feed page.

Ingest rules can be created or changed by navigating to Projects in the Settings tab and then selecting a project. When you create or update ingest rules, those changes are staged and not directly applied. Other users may also stage changes.

Each rule describes a list of conditions, where each condition describes a single characteristic.

Project Ingest Rule Conditions

A condition consists of these properties:

Property	Description
Event Attribute	Chef Organization or Chef Infra Server
Node Attribute	Chef Organization, Chef Infra Server, Environment, Chef Role, Chef Tag, Chef Policy Name, or Chef Policy Group
Operator	equals of member of
Values	list of one or more values to match on the specified attribute

Details

To change the name of a project, navigate to Projects in the Settings tab and then select the Details tab.

Updating Projects

The Project List page displays the status of project ingest rules (No rules, Edits pending, or Applied).

If a project has pending edits from changes to ingest rules, then all projects must be updated for those pending edits to take effect. Updating projects will apply all pending edits and move ingested resources into the correct projects. This background process can take a few minutes for systems with a limited number of nodes, and several days for systems with a large number of nodes.

All changes will be applied together when you update projects. To update projects navigate to Projects in the Settings tab and use the Update Projects button.

Stopping the Project Update Early

Stopping a project update early will leave your resources in a bad state. Some resources will be in the correct projects and others will not be. To resolve this, make sure to start another project update.

To stop the project update background process before it finishes, navigate to Projects in the Settings tab and select the Stop Updating Projects button.