diff options
author | Erez Freiberger <efreiber@redhat.com> | 2017-06-18 18:30:50 +0300 |
---|---|---|
committer | Erez Freiberger <efreiber@redhat.com> | 2017-08-03 11:40:26 +0300 |
commit | 497c01b5aa249eced1df4ba5a05c88a68df7591d (patch) | |
tree | 6fcdf8e32122cf8493e404035578050f159146b6 | |
parent | 1765ce2bb6ab28a14c60dd5c268ec97ed788a1c1 (diff) | |
download | openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.gz openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.bz2 openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.xz openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.zip |
adding pods/logs to manageiq role
This will allow manageiq to read the logs from elasticsearch
in the logging project.
Also, adding role to correct user and as clusterrole
-rw-r--r-- | roles/openshift_manageiq/tasks/main.yaml | 6 | ||||
-rw-r--r-- | roles/openshift_manageiq/vars/main.yml | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/roles/openshift_manageiq/tasks/main.yaml b/roles/openshift_manageiq/tasks/main.yaml index cfc4e2722..7789d2232 100644 --- a/roles/openshift_manageiq/tasks/main.yaml +++ b/roles/openshift_manageiq/tasks/main.yaml @@ -24,6 +24,12 @@ - apiGroups: - "" resources: + - pods/log + verbs: + - "get" + - apiGroups: + - "" + resources: - pods/proxy verbs: - "*" diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml index 15d667628..7ccc2fc3b 100644 --- a/roles/openshift_manageiq/vars/main.yml +++ b/roles/openshift_manageiq/vars/main.yml @@ -3,9 +3,9 @@ manage_iq_tasks: - resource_kind: role resource_name: admin user: management-admin -- resource_kind: role +- resource_kind: cluster-role resource_name: management-infra-admin - user: management-admin + user: system:serviceaccount:management-infra:management-admin - resource_kind: cluster-role resource_name: cluster-reader user: system:serviceaccount:management-infra:management-admin |