+1 to document somewhere how SCC is working, priority defined, and
what should be done to resolve such issues
On Wed, May 23, 2018 at 11:06 PM, Daniel Comnea
wrote:
>
>
> On Wed, May 23, 2018 at 5:20 PM, Vyacheslav Semushin
> wrote:
>
>> 2018-05-17 17:18 GMT+02:00 Charles Moulliard :
>>
>>
2018-05-23 23:06 GMT+02:00 Daniel Comnea :
>
>
> On Wed, May 23, 2018 at 5:20 PM, Vyacheslav Semushin
> wrote:
>
>> 2018-05-17 17:18 GMT+02:00 Charles Moulliard :
>>
>>> The trick / solution described there doesn t work. I tried also using
>>> the ansible playbook of Openshift to remove the proj
2018-05-24 10:10 GMT+02:00 Charles Moulliard :
> +1 to document somewhere how SCC is working, priority defined, and
> what should be done to resolve such issues
>
Perhaps this info is hard to find but it's there:
https://docs.openshift.org/latest/architecture/additional_concepts/authorizatio
Fair point Slava, hat off.
Thanks for the info.
On Thu, May 24, 2018 at 11:16 AM, Vyacheslav Semushin
wrote:
> 2018-05-24 10:10 GMT+02:00 Charles Moulliard :
>
>> +1 to document somewhere how SCC is working, priority defined, and
>> what should be done to resolve such issues
>>
>
> Perhaps
Hi,
Is any alternative to "oc adm policy add-scc-to-user" command in the same
way there is one for "oc create serviceaccount foo" which can be achieved
by
apiVersion: v1
kind: ServiceAccount
metadata:
name: foo-sa
namespace: foo
I'd like to be able to put all the info in a file rather t
Hey, you could use oc's --loglevel=N to see the exact HTTP request/response
flow with the api and adapt it to your need.
I believe a level of 8 should be enough.
--
Mateus Caruccio / Master of Puppets
GetupCloud.com
We make the infrastructure invisible
Gartner Cool Vendor 2017
2018-05-24 18:16 GM
Well yeah that is an option but then that is more or less like "oc edit
scc" which is not what i want since i need to know all the users and that
is tricky depending on the time when i run it (green field deployment,
after upgrade etc)
On Thu, May 24, 2018 at 10:24 PM, Mateus Caruccio <
mateus.car
Not to mention that with the spec file at least i should be able to use
either kubectl or oc cli while with "oc adm" you can do it only with oc cli.
On Thu, May 24, 2018 at 10:32 PM, Daniel Comnea
wrote:
> Well yeah that is an option but then that is more or less like "oc edit
> scc" which is no
AFAIK there is nothing special on `oc adm`. It's just a regular rest client
for the API.
Also, SCC exists only on openshift.
Am I missing something here?
--
Mateus Caruccio / Master of Puppets
GetupCloud.com
We make the infrastructure invisible
Gartner Cool Vendor 2017
2018-05-24 18:35 GMT-03:00
