#7217 Grant 'ralph' rights on the greenwave project in openshift (prod and stg)
Closed: Fixed 5 years ago Opened 5 years ago by ralph.

When I login to openshift to debug #7216, I am only on the waiverdb project and do not have access to greenwave.

I have always worked around this by authenticating as root to the os-master nodes and working there... but that's not the way I should work. For one, it will step on the toes of other admins working there at the same time when all I want to do is get my application logs.

Can you please grant my account rights to greenwave in prod and stage?


You can add yourself to the "projectowners:" list in the playbook and rerun it.

Metadata Update from @ralph:
- Issue status updated to: Closed (was: Open)

5 years ago

Actually, it seems to not be happy yet. I added myself, and ran the playbook in staging but now when I login I can see the greenwave project, but I get the following error for oc status:

Error from server (Forbidden): projects.project.openshift.io "greenwave" is forbidden: User "ralph" cannot get projects.project.openshift.io in the namespace "greenwave": User "ralph" cannot get project "greenwave"

Metadata Update from @ralph:
- Issue status updated to: Open (was: Closed)

5 years ago

Fixed with:

[root@os-master01 ~][STG]# echo >>/etc/openshift_apps/greenwave/appowners.yml 
[root@os-master01 ~][STG]# echo >>/etc/openshift_apps/greenwave/role-appowners.yml 
[root@batcave01 ~][PROD]# ansible-playbook /srv/web/infra/ansible/playbooks/openshift-apps/greenwave.yml -l staging

Fix verified with:

[root@os-master01 ~][STG]# oc --as ralph -n greenwave status

Metadata Update from @mizdebsk:
- Issue assigned to mizdebsk
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

5 years ago

Login to comment on this ticket.

Metadata