diff options
| author | Suren A. Chilingaryan <csa@suren.me> | 2018-04-14 02:09:54 +0200 |
|---|---|---|
| committer | Suren A. Chilingaryan <csa@suren.me> | 2018-04-14 02:09:54 +0200 |
| commit | 110ae6da8d80b63a068f4537383e775d958cf9a9 (patch) | |
| tree | 1e3e84f1245d48518e0147400c6a3c624db10ee5 /setup | |
| parent | 5b9f90a1b410a0464eaad713c00b287174da80d2 (diff) | |
| download | ands-110ae6da8d80b63a068f4537383e775d958cf9a9.tar.gz ands-110ae6da8d80b63a068f4537383e775d958cf9a9.tar.bz2 ands-110ae6da8d80b63a068f4537383e775d958cf9a9.tar.xz ands-110ae6da8d80b63a068f4537383e775d958cf9a9.zip | |
Provide support for global OpenShift resources (ClusterRoles, etc.)
Diffstat (limited to 'setup')
| -rw-r--r-- | setup/configs/openshift.yml | 2 | ||||
| -rw-r--r-- | setup/projects/openshift/templates/maintain.yml.j2 | 33 | ||||
| -rw-r--r-- | setup/projects/openshift/vars/script.yml | 2 |
3 files changed, 37 insertions, 0 deletions
diff --git a/setup/configs/openshift.yml b/setup/configs/openshift.yml index 10146e8..a4024ae 100644 --- a/setup/configs/openshift.yml +++ b/setup/configs/openshift.yml @@ -20,6 +20,8 @@ ands_openshift_roles: kaas/admin: csa, kopmann katrin/admin: katrin adei/admin: csa + adei/view: pdv, kopmann + adei/kaas-maintain: pdv, kopmann bora/admin: ntj web/admin: kopmann mon/admin: csa diff --git a/setup/projects/openshift/templates/maintain.yml.j2 b/setup/projects/openshift/templates/maintain.yml.j2 new file mode 100644 index 0000000..41017a5 --- /dev/null +++ b/setup/projects/openshift/templates/maintain.yml.j2 @@ -0,0 +1,33 @@ +apiVersion: v1 +kind: ClusterRole +metadata: + annotations: + openshift.io/description: A user that can create and edit most objects in a project, + but can not update the project's membership. + openshift.io/reconcile-protect: "false" + creationTimestamp: null + name: kaas-maintain +rules: +- resources: + - pods/exec + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch +- resources: + - replicationcontrollers/scale + - deploymentconfigs/scale + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch diff --git a/setup/projects/openshift/vars/script.yml b/setup/projects/openshift/vars/script.yml new file mode 100644 index 0000000..0d9ccef --- /dev/null +++ b/setup/projects/openshift/vars/script.yml @@ -0,0 +1,2 @@ +oc: + - templates: "maintain*" |