summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRussell Teague <rteague@redhat.com>2017-03-02 11:45:28 -0500
committerRussell Teague <rteague@redhat.com>2017-03-02 15:35:24 -0500
commit33bc830837735f2b18ca72b0a3891547abd17dba (patch)
tree3f6e7df3fce4ba5f4029c8cf1e3f0b54a5761337
parent5129f8b4b4a6d5451fd47269dc652a6eac0d3f24 (diff)
downloadopenshift-33bc830837735f2b18ca72b0a3891547abd17dba.tar.gz
openshift-33bc830837735f2b18ca72b0a3891547abd17dba.tar.bz2
openshift-33bc830837735f2b18ca72b0a3891547abd17dba.tar.xz
openshift-33bc830837735f2b18ca72b0a3891547abd17dba.zip
Add oc_adm_policy_user task cluster-role policy
-rw-r--r--roles/openshift_hosted/tasks/registry/registry.yml7
1 files changed, 7 insertions, 0 deletions
diff --git a/roles/openshift_hosted/tasks/registry/registry.yml b/roles/openshift_hosted/tasks/registry/registry.yml
index 79b6a9504..d89ce855a 100644
--- a/roles/openshift_hosted/tasks/registry/registry.yml
+++ b/roles/openshift_hosted/tasks/registry/registry.yml
@@ -56,6 +56,13 @@
openshift_hosted_registry_force:
- False
+- name: oc adm policy add-cluster-role-to-user system:registry system:serviceaccount:default:registry
+ oc_adm_policy_user:
+ user: system:serviceaccount:default:registry
+ resource_kind: cluster-role
+ resource_name: system:registry
+ state: present
+
- name: create the default registry service
oc_service:
namespace: "{{ openshift_hosted_registry_namespace }}"