summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErez Freiberger <efreiber@redhat.com>2017-06-18 18:30:50 +0300
committerErez Freiberger <efreiber@redhat.com>2017-08-03 11:40:26 +0300
commit497c01b5aa249eced1df4ba5a05c88a68df7591d (patch)
tree6fcdf8e32122cf8493e404035578050f159146b6
parent1765ce2bb6ab28a14c60dd5c268ec97ed788a1c1 (diff)
downloadopenshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.gz
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.bz2
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.xz
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.zip
adding pods/logs to manageiq role
This will allow manageiq to read the logs from elasticsearch in the logging project. Also, adding role to correct user and as clusterrole
-rw-r--r--roles/openshift_manageiq/tasks/main.yaml6
-rw-r--r--roles/openshift_manageiq/vars/main.yml4
2 files changed, 8 insertions, 2 deletions
diff --git a/roles/openshift_manageiq/tasks/main.yaml b/roles/openshift_manageiq/tasks/main.yaml
index cfc4e2722..7789d2232 100644
--- a/roles/openshift_manageiq/tasks/main.yaml
+++ b/roles/openshift_manageiq/tasks/main.yaml
@@ -24,6 +24,12 @@
- apiGroups:
- ""
resources:
+ - pods/log
+ verbs:
+ - "get"
+ - apiGroups:
+ - ""
+ resources:
- pods/proxy
verbs:
- "*"
diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml
index 15d667628..7ccc2fc3b 100644
--- a/roles/openshift_manageiq/vars/main.yml
+++ b/roles/openshift_manageiq/vars/main.yml
@@ -3,9 +3,9 @@ manage_iq_tasks:
- resource_kind: role
resource_name: admin
user: management-admin
-- resource_kind: role
+- resource_kind: cluster-role
resource_name: management-infra-admin
- user: management-admin
+ user: system:serviceaccount:management-infra:management-admin
- resource_kind: cluster-role
resource_name: cluster-reader
user: system:serviceaccount:management-infra:management-admin