Hi, can the group sysadmin-openshift please be given permissions to run all openshift-apps playbooks.
Soon as possible please.
Metadata Update from @humaton: - Issue tagged with: low-gain, low-trouble, ops
Just spoke with @mobrien to discuss this ticket, it seems the way permissions are dealt out to the various openshift apps is messy, and potentially it might not be a good idea to have one group being able to access all these apps?
How best should be handle this issue?
I'd like to begin deploying all the apps on the new ocp4 staging cluster, should we instead ask each app's owners to do it?
ping @mobrien @kevin
I'm not sure it would be bad to make sysadmin-openshift a group to be able to run all the openshift apps playbooks. I am not sure our rbac-playbook tool will do this however. I'd be ok trying to get that working and if it doesn't falling back to asking app owners to do their apps... I fear that could take a long time tho.
Metadata Update from @kevin: - Issue priority set to: Waiting on Assignee (was: Needs Review)
This should be done now. Thanks @mobrien !
Metadata Update from @kevin: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.