#7217 Grant 'ralph' rights on the greenwave project in openshift (prod and stg)
Closed: Fixed Opened by ralph.

When I login to openshift to debug #7216, I am only on the waiverdb project and do not have access to greenwave.

I have always worked around this by authenticating as root to the os-master nodes and working there... but that's not the way I should work. For one, it will step on the toes of other admins working there at the same time when all I want to do is get my application logs.

Can you please grant my account rights to greenwave in prod and stage?


You can add yourself to the "projectowners:" list in the playbook and rerun it.

Added here: https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=3b9b151e5d035a8c1b0b38f50ffbe8ec725486e2

Metadata Update from @ralph:
- Issue status updated to: Closed (was: Open)

Actually, it seems to not be happy yet. I added myself, and ran the playbook in staging but now when I login I can see the greenwave project, but I get the following error for oc status:

Error from server (Forbidden): projects.project.openshift.io "greenwave" is forbidden: User "ralph" cannot get projects.project.openshift.io in the namespace "greenwave": User "ralph" cannot get project "greenwave"

Metadata Update from @ralph:
- Issue status updated to: Open (was: Closed)

Fixed with:

[root@os-master01 ~][STG]# echo >>/etc/openshift_apps/greenwave/appowners.yml 
[root@os-master01 ~][STG]# echo >>/etc/openshift_apps/greenwave/role-appowners.yml 
[root@batcave01 ~][PROD]# ansible-playbook /srv/web/infra/ansible/playbooks/openshift-apps/greenwave.yml -l staging

Fix verified with:

[root@os-master01 ~][STG]# oc --as ralph -n greenwave status

Metadata Update from @mizdebsk:
- Issue assigned to mizdebsk
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata