Installation roles and personas

Edit online
Only a cluster administrator can complete certain planning and installation tasks. A project administrator can complete other tasks. Learn which role is set to complete each task, based on the installation method that you prefer.

Administrative roles

Concert, Concert Workflows, and Concert Data Apps supports separate roles and duties so the installation can proceed with as few restrictions as possible.

Use the roles defined in the following sections to complete some of the installation tasks with fewer permissions.

The installation and upgrade tasks use the following tags to help you identify which users are involved in a task:

  • Cluster administrator
  • Registry administrator

Cluster administrator

A cluster administrator is responsible for setting up and preparing the cluster for Concert, or Concert Workflows, or Concert Data Apps. To complete these tasks, you must have the cluster-admin role.

A cluster administrator must complete the following tasks:

  • Setting up a cluster, which includes
    • Installing Red Hat® OpenShift® Container Platform, if it is not already installed
    • Installing persistent storage, if it is not already installed
    • Installing Multicloud Object Gateway, if needed
    • Setting up a private container registry, if needed
    • Ensuring the cluster is security hardened
    • Adding, expanding, or replacing nodes, as needed.
  • Preparing the cluster for the Concert, Concert Workflows, and Concert Data Apps, which includes
    • Installing the shared cluster components
    • Configuring persistent storage for Concert, Concert Workflows, and Concert Data Apps.
    • Creating custom security context constraints (SCCs) for services, if needed
    • Adjusting node settings for services, if needed.
  • Preparing the cluster for an instance of IBM® Concert, which includes
    • (Optional) Manually creating the projects (namespaces) for the instance.
    • Setting namespace quotas and limit ranges on the projects that are associated with the instance
    • Assigning the required roles to the user or users who will administer the instance.

Registry administrator

If you use a private container registry, you must have a user who can push images to the private container registry, such as a registry administrator.

The registry administrator is responsible for mirroring the Concert, or Concert Workflows, or Concert Data Apps images from the IBM Entitled Registry to the private container registry.

The registry administrator does not need access to the Container Platform cluster.