Re: service account for rest api
Hello
I tried with view and cluster-admin too. No luck
Guess is the curl issue
Ty!
> El 19 oct 2017, a las 21:40, Luke Meyer escribió:
>
>
>
>> On Thu, Oct 19, 2017 at 10:58 AM, Julio Saura wrote:
>> yes ofc
>>
>> oc create serviceaccount icinga -n project1
>>
>> oadm policy add-cluster-role-to-user admin
>> system:serviceaccounts:project1:icinga
>
> There is no cluster role "admin" (... by default anyway, you could of course
> create one).
>
> You probably wanted `oc policy add-role-to-user admin ...` to make the user
> an admin of the project.
>
> Unless you actually wanted them to be an admin of the entire cluster, in
> which case the role is cluster-admin not admin.
>
>
>>
>> oadm policy reconcile-cluster-roles —confirm
>>
>> and then dump the token
>>
>> oc serviceaccounts get-token icing
>>
>>
>> ty frederic!
>>
>> i do login with curl but i get
>>
>> {
>> "kind": "Status",
>> "apiVersion": "v1",
>> "metadata": {},
>> "status": "Failure",
>> "message": "User \"system:serviceaccount:project1:icinga\" cannot list
>> replicationcontrollers in project \”project1\"",
>> "reason": "Forbidden",
>> "details": {
>> "kind": "replicationcontrollers"
>> },
>> "code": 403
>> }
>>
>>
>>
>>
>>
>>> El 19 oct 2017, a las 16:55, Frederic Giloux escribió:
>>>
>>> Hi Julio,
>>>
>>> Could you copy the commands you have used?
>>>
>>> Regards,
>>>
>>> Frédéric
>>>
On 19 Oct 2017 11:43, "Julio Saura" wrote:
Hello
i am trying to create a sa for accessing rest api with token ..
i have followed the doc steps
creating the account, applying admin role to that account and getting the
token
trying to access replicacioncontroller info with bearer in curl, i can
auth into but i get i have no permission to list rc on the project
i also did a reconciliate role on cluster
i also logged in with oc login passing token as parameter, i log in but it
says i have no projects ..
what else i am missing?
ty
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>
>>
>> ___
>> users mailing list
>> users@lists.openshift.redhat.com
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>
>
___
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
Re: service account for rest api
Yikes !! I will check tomorrow Ty! > El 19 oct 2017, a las 18:16, Cesar Wong escribió: > > > Julio, > > Depending on your version of curl, you may be hitting this: > https://bugzilla.redhat.com/show_bug.cgi?id=1260178 > > On Thu, Oct 19, 2017 at 12:11 PM, Julio Saura wrote: > umm that works … > > weird > > Julio Saura Alejandre > Responsable Servicios Gestionados > hiberus TRAVEL > Tel.: + 34 902 87 73 92 Ext. 659 > Parque Empresarial PLAZA > Edificio EXPOINNOVACIÓN > C/. Bari 25 Duplicado, Escalera 1, Planta 2ª. 50197 Zaragoza > www.hiberus.com > Crecemos contigo > > Este mensaje se envía desde la plataforma de correo de Hiberus Este mensaje y > los documentos que, en su caso, lleve anexos, se dirigen exclusivamente a su > destinatario y pueden contener información privilegiada o confidencial. Si tú > no eres el destinatario indicado, queda notificado de que la utilización, > divulgación y/o copia sin autorización está prohibida en virtud de la > legislación vigente. Por ello, se informa a quien lo reciba por error, que la > información contenida en el mismo es reservada y su uso no autorizado está > prohibido legalmente, por lo que en tal caso te rogamos que nos lo comuniques > vía e-mail o teléfono, te abstengas de realizar copias del mensaje o > remitirlo o entregarlo a terceras personas y procedas a devolverlo a su > emisor y/o destruirlo de inmediato. > >> El 19 oct 2017, a las 18:01, Frederic Giloux escribió: >> >> oc get rc -n project1 --as=system:serviceaccounts:project1:inciga > ___ users mailing list users@lists.openshift.redhat.com http://lists.openshift.redhat.com/openshiftmm/listinfo/users
Re: docker version doubt
Ummm weird I am still puzzled then with the unsupported word I will deploy my apps on that cluster tomorrow. Hope it works without problems :-/ > El 20 sept 2016, a las 22:29, Alex Wauck escribió: > > Oh, I didn't notice the "unsupported" part. Mine says that, too, though. > Interestingly enough, I *don't* see it on my laptop or a Debian server here > at work. On the Debian server, it's 1.12, and it comes straight from Docker > themselves. On my laptop, it comes from the Arch Linux community package, > which compiles the docker binary instead of downloading a pre-built binary > from Docker. So, I guess my initial theory that binaries that *don't* come > straight from Docker themselves have that "unsupported" bit is false. I also > don't see it on my personal Debian server, where I installed Docker 1.6.2 > from the Debian repository, so it's not phoning home and asking if it's still > supported. > > So, no idea why it says that. Sorry. > >> On Tue, Sep 20, 2016 at 10:23 AM, Julio Saura wrote: >> nice to hear >> >> is a weird version name although xD >> >> thanks alex. >> >> best regards >> >>> El 20 sept 2016, a las 17:16, Alex Wauck escribió: >>> >>> I've seen the same thing myself. It seems to cause some bad interactions >>> with image stream tags (i.e. sha256-based references result in pull >>> failures), but on the plus side, you can use all those images on Docker Hub >>> that were pushed with 1.10 or later. On balance, I'd say it solves more >>> problems than it creates. We're running our production OpenShift cluster >>> with 1.10, and it's worked out pretty well for us. >>> >>> On Tue, Sep 20, 2016 at 3:50 AM, Julio Saura wrote: Hello i am installing a new brand open shift origin cluster with centos 7. after installing docker engine ( from centos repo ) i check the version and i am concerned about the result docker --version Docker version 1.10.3, build cb079f6-unsupported unsupported¿? is this normal? thanks ___ users mailing list users@lists.openshift.redhat.com http://lists.openshift.redhat.com/openshiftmm/listinfo/users >>> >>> >>> >>> -- >>> Alex Wauck // DevOps Engineer >>> >>> E X O S I T E >>> www.exosite.com >>> >>> Making Machines More Human. >> > > > > -- > Alex Wauck // DevOps Engineer > > E X O S I T E > www.exosite.com > > Making Machines More Human. ___ users mailing list users@lists.openshift.redhat.com http://lists.openshift.redhat.com/openshiftmm/listinfo/users
