Hi,

> OK, but when I login into the console as 'developer' and 'developer', I do
> not see the OpenShift namespace/project like a "administrator" would.

and you want to see this why?

> The ultimate goal is to let the human (end-user) log in to the console as
> the Admin so he/she can see their work.

This part I don't get. A user should not create application (their work)
in the default/openshift namespace. They are reserved namespaces. 
Your work is in 'myproject' or any other namespace you are going to create. 

> Right now, I would say our current approach of system:admin with no
> password is a bug

AFAIU, there is even no other way then to use certificate based authentication
for sytem:admin. This account is special. You literally cannot login any
other way. This is different to the 'admin' user in CDK. In CDK we had an
'admin' user (on top of the openshift-dev user) which got assigned the 
cluster admin role - 
https://github.com/projectatomic/adb-utils/blob/master/services/openshift/scripts/openshift_provision#L196

So one can add the same role to the developer user in Minishift, either 
per default or via an addon (something we are working on right now) or
one creates another admin user as per CDK. Addon might be the best way to go.

--Hardy


Attachment: signature.asc
Description: PGP signature

_______________________________________________
Devtools mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/devtools

Reply via email to