summaryrefslogtreecommitdiffstats
path: root/roles/openshift_manageiq/vars/main.yml
diff options
context:
space:
mode:
authorBrenton Leanhardt <bleanhar@redhat.com>2015-12-04 11:06:57 -0500
committerBrenton Leanhardt <bleanhar@redhat.com>2015-12-04 11:06:57 -0500
commitffb663f5f688ecaff0bfd2d928c8fba83c1d24f9 (patch)
tree306cea4856c7c986e3ddffe60f87d6332c94755e /roles/openshift_manageiq/vars/main.yml
parent1c01ea16e7acc002fd0c0c78301190155adcea3c (diff)
parent04ce758d35666c9f887a9bb1b44ccae1d20ee908 (diff)
downloadopenshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.gz
openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.bz2
openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.xz
openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.zip
Merge pull request #983 from enoodle/manageiq_service
Adding ManageIQ service account
Diffstat (limited to 'roles/openshift_manageiq/vars/main.yml')
-rw-r--r--roles/openshift_manageiq/vars/main.yml24
1 files changed, 24 insertions, 0 deletions
diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml
new file mode 100644
index 000000000..77e1c304b
--- /dev/null
+++ b/roles/openshift_manageiq/vars/main.yml
@@ -0,0 +1,24 @@
+manageiq_cluster_role:
+ apiVersion: v1
+ kind: ClusterRole
+ metadata:
+ name: management-infra-admin
+ rules:
+ - resources:
+ - pods/proxy
+ verbs:
+ - '*'
+
+manageiq_service_account:
+ apiVersion: v1
+ kind: ServiceAccount
+ metadata:
+ name: management-admin
+
+manage_iq_tmp_conf: /tmp/manageiq_admin.kubeconfig
+
+manage_iq_tasks:
+ - policy add-role-to-user -n management-infra admin -z management-admin
+ - policy add-role-to-user -n management-infra management-infra-admin -z management-admin
+ - policy add-cluster-role-to-user cluster-reader system:serviceaccount:management-infra:management-admin
+ - policy add-scc-to-user privileged system:serviceaccount:management-infra:management-admin