diff options
| author | Erez Freiberger <efreiber@redhat.com> | 2017-06-18 18:30:50 +0300 |
|---|---|---|
| committer | Erez Freiberger <efreiber@redhat.com> | 2017-08-03 11:40:26 +0300 |
| commit | 497c01b5aa249eced1df4ba5a05c88a68df7591d (patch) | |
| tree | 6fcdf8e32122cf8493e404035578050f159146b6 /roles/openshift_manageiq | |
| parent | 1765ce2bb6ab28a14c60dd5c268ec97ed788a1c1 (diff) | |
| download | openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.gz openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.bz2 openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.xz openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.zip | |
adding pods/logs to manageiq role
This will allow manageiq to read the logs from elasticsearch
in the logging project.
Also, adding role to correct user and as clusterrole
Diffstat (limited to 'roles/openshift_manageiq')
| -rw-r--r-- | roles/openshift_manageiq/tasks/main.yaml | 6 | ||||
| -rw-r--r-- | roles/openshift_manageiq/vars/main.yml | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/roles/openshift_manageiq/tasks/main.yaml b/roles/openshift_manageiq/tasks/main.yaml index cfc4e2722..7789d2232 100644 --- a/roles/openshift_manageiq/tasks/main.yaml +++ b/roles/openshift_manageiq/tasks/main.yaml @@ -24,6 +24,12 @@ - apiGroups: - "" resources: + - pods/log + verbs: + - "get" + - apiGroups: + - "" + resources: - pods/proxy verbs: - "*" diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml index 15d667628..7ccc2fc3b 100644 --- a/roles/openshift_manageiq/vars/main.yml +++ b/roles/openshift_manageiq/vars/main.yml @@ -3,9 +3,9 @@ manage_iq_tasks: - resource_kind: role resource_name: admin user: management-admin -- resource_kind: role +- resource_kind: cluster-role resource_name: management-infra-admin - user: management-admin + user: system:serviceaccount:management-infra:management-admin - resource_kind: cluster-role resource_name: cluster-reader user: system:serviceaccount:management-infra:management-admin |