diff options
| author | Brenton Leanhardt <bleanhar@redhat.com> | 2015-12-04 11:06:57 -0500 |
|---|---|---|
| committer | Brenton Leanhardt <bleanhar@redhat.com> | 2015-12-04 11:06:57 -0500 |
| commit | ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9 (patch) | |
| tree | 306cea4856c7c986e3ddffe60f87d6332c94755e /roles/openshift_manageiq/vars | |
| parent | 1c01ea16e7acc002fd0c0c78301190155adcea3c (diff) | |
| parent | 04ce758d35666c9f887a9bb1b44ccae1d20ee908 (diff) | |
| download | openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.gz openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.bz2 openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.tar.xz openshift-ffb663f5f688ecaff0bfd2d928c8fba83c1d24f9.zip | |
Merge pull request #983 from enoodle/manageiq_service
Adding ManageIQ service account
Diffstat (limited to 'roles/openshift_manageiq/vars')
| -rw-r--r-- | roles/openshift_manageiq/vars/main.yml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml new file mode 100644 index 000000000..77e1c304b --- /dev/null +++ b/roles/openshift_manageiq/vars/main.yml @@ -0,0 +1,24 @@ +manageiq_cluster_role: + apiVersion: v1 + kind: ClusterRole + metadata: + name: management-infra-admin + rules: + - resources: + - pods/proxy + verbs: + - '*' + +manageiq_service_account: + apiVersion: v1 + kind: ServiceAccount + metadata: + name: management-admin + +manage_iq_tmp_conf: /tmp/manageiq_admin.kubeconfig + +manage_iq_tasks: + - policy add-role-to-user -n management-infra admin -z management-admin + - policy add-role-to-user -n management-infra management-infra-admin -z management-admin + - policy add-cluster-role-to-user cluster-reader system:serviceaccount:management-infra:management-admin + - policy add-scc-to-user privileged system:serviceaccount:management-infra:management-admin |