summaryrefslogtreecommitdiffstats
path: root/playbooks/common
diff options
context:
space:
mode:
authorDevan Goodwin <dgoodwin@redhat.com>2016-11-10 08:17:30 -0400
committerDevan Goodwin <dgoodwin@redhat.com>2016-11-10 08:25:42 -0400
commitea688ac1565148ae5053dc34fe119a34f5169ea6 (patch)
treea2d77ab46a3f78a753e7c20f18cde24302ad375e /playbooks/common
parent24804da994917f50be32e2c5fb62e2e120e6652f (diff)
downloadopenshift-ea688ac1565148ae5053dc34fe119a34f5169ea6.tar.gz
openshift-ea688ac1565148ae5053dc34fe119a34f5169ea6.tar.bz2
openshift-ea688ac1565148ae5053dc34fe119a34f5169ea6.tar.xz
openshift-ea688ac1565148ae5053dc34fe119a34f5169ea6.zip
Reconcile role bindings for jenkins pipeline during upgrade.
https://github.com/openshift/origin/issues/11170 for more info.
Diffstat (limited to 'playbooks/common')
-rw-r--r--playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml b/playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml
index afbfe0106..7a96776b6 100644
--- a/playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml
+++ b/playbooks/common/openshift-cluster/upgrades/upgrade_control_plane.yml
@@ -228,6 +228,12 @@
when: origin_reconcile_bindings | bool or ent_reconcile_bindings | bool
run_once: true
+ - name: Reconcile Jenkins Pipeline Role Bindings
+ command: >
+ {{ openshift.common.client_binary }} adm --config={{ openshift.common.config_base }}/master/admin.kubeconfig policy reconcile-cluster-role-bindings system:build-strategy-jenkinspipeline --confirm
+ run_once: true
+ when: openshift.common.version_gte_3_4_or_1_4 | bool
+
- name: Reconcile Security Context Constraints
command: >
{{ openshift.common.client_binary }} adm policy reconcile-sccs --confirm --additive-only=true