summaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
authorErez Freiberger <efreiber@redhat.com>2017-06-18 18:30:50 +0300
committerErez Freiberger <efreiber@redhat.com>2017-08-03 11:40:26 +0300
commit497c01b5aa249eced1df4ba5a05c88a68df7591d (patch)
tree6fcdf8e32122cf8493e404035578050f159146b6 /roles
parent1765ce2bb6ab28a14c60dd5c268ec97ed788a1c1 (diff)
downloadopenshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.gz
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.bz2
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.tar.xz
openshift-497c01b5aa249eced1df4ba5a05c88a68df7591d.zip
adding pods/logs to manageiq role
This will allow manageiq to read the logs from elasticsearch in the logging project. Also, adding role to correct user and as clusterrole
Diffstat (limited to 'roles')
-rw-r--r--roles/openshift_manageiq/tasks/main.yaml6
-rw-r--r--roles/openshift_manageiq/vars/main.yml4
2 files changed, 8 insertions, 2 deletions
diff --git a/roles/openshift_manageiq/tasks/main.yaml b/roles/openshift_manageiq/tasks/main.yaml
index cfc4e2722..7789d2232 100644
--- a/roles/openshift_manageiq/tasks/main.yaml
+++ b/roles/openshift_manageiq/tasks/main.yaml
@@ -24,6 +24,12 @@
- apiGroups:
- ""
resources:
+ - pods/log
+ verbs:
+ - "get"
+ - apiGroups:
+ - ""
+ resources:
- pods/proxy
verbs:
- "*"
diff --git a/roles/openshift_manageiq/vars/main.yml b/roles/openshift_manageiq/vars/main.yml
index 15d667628..7ccc2fc3b 100644
--- a/roles/openshift_manageiq/vars/main.yml
+++ b/roles/openshift_manageiq/vars/main.yml
@@ -3,9 +3,9 @@ manage_iq_tasks:
- resource_kind: role
resource_name: admin
user: management-admin
-- resource_kind: role
+- resource_kind: cluster-role
resource_name: management-infra-admin
- user: management-admin
+ user: system:serviceaccount:management-infra:management-admin
- resource_kind: cluster-role
resource_name: cluster-reader
user: system:serviceaccount:management-infra:management-admin