From b442cffad61e28c7a59b7534e417766ce7e441cf Mon Sep 17 00:00:00 2001
From: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
Date: Wed, 25 Sep 2024 15:02:37 +0200
Subject: [PATCH] fix issue where scheduler was missing permissionGroupMapping
 config

Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
---
 README.md                        | 26 ++++++++++++++++++++++++++
 dev/quickstart/armada-crs.yaml   | 12 ++++++++++++
 dev/quickstart/redis.values.yaml |  3 ++-
 3 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 343993a..4c31cb1 100644
--- a/README.md
+++ b/README.md
@@ -131,6 +131,32 @@ armadactl submit dev/quickstart/example-job.yaml
 
 Check the status of your job in the Lookout UI by visiting `http://localhost:30000` (assuming Armada was installed via the Quickstart guide and it is exposed via a NodePort service) in your browser.
 
+## Migrations
+
+### Migrating to v0.11 and beyond
+
+Since v0.11, Armada Scheduler requires `permissionGroupsMapping` also to be configured.
+
+Make sure the `applicationConfig` field in the Armada Scheduler CRD includes the `permissionGroupsMapping` field.
+
+Quickstart example which allows anonymous auth:
+```yaml
+auth:
+  anonymousAuth: true
+  permissionGroupMapping:
+    submit_jobs: ["everyone"]
+    submit_any_jobs: ["everyone"]
+    create_queue: ["everyone"]
+    delete_queue: ["everyone"]
+    cancel_jobs: ["everyone"]
+    cancel_any_jobs: ["everyone"]
+    reprioritize_jobs: ["everyone"]
+    reprioritize_any_jobs: ["everyone"]
+    watch_events: ["everyone"]
+    watch_all_events: ["everyone"]
+    execute_jobs: ["everyone"]
+```
+
 ## Documentation
 
 For a step-by-step guide on how to install Armada using the Armada Operator and interact with the Armada API,
diff --git a/dev/quickstart/armada-crs.yaml b/dev/quickstart/armada-crs.yaml
index 09f099f..7cea095 100644
--- a/dev/quickstart/armada-crs.yaml
+++ b/dev/quickstart/armada-crs.yaml
@@ -146,6 +146,18 @@ spec:
       port: 50051
     auth:
       anonymousAuth: true
+      permissionGroupMapping:
+        submit_jobs: ["everyone"]
+        submit_any_jobs: ["everyone"]
+        create_queue: ["everyone"]
+        delete_queue: ["everyone"]
+        cancel_jobs: ["everyone"]
+        cancel_any_jobs: ["everyone"]
+        reprioritize_jobs: ["everyone"]
+        reprioritize_any_jobs: ["everyone"]
+        watch_events: ["everyone"]
+        watch_all_events: ["everyone"]
+        execute_jobs: ["everyone"]
     armadaApi:
       armadaUrl: armada-server.armada.svc.cluster.local:50051
       forceNoTls: true
diff --git a/dev/quickstart/redis.values.yaml b/dev/quickstart/redis.values.yaml
index 3b3a995..38ce5e4 100644
--- a/dev/quickstart/redis.values.yaml
+++ b/dev/quickstart/redis.values.yaml
@@ -1 +1,2 @@
-replicas: 1
+replicas: 2
+hardAntiAffinity: false