From 33bc830837735f2b18ca72b0a3891547abd17dba Mon Sep 17 00:00:00 2001
From: Russell Teague <rteague@redhat.com>
Date: Thu, 2 Mar 2017 11:45:28 -0500
Subject: Add oc_adm_policy_user task cluster-role policy

---
 roles/openshift_hosted/tasks/registry/registry.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/openshift_hosted/tasks/registry/registry.yml b/roles/openshift_hosted/tasks/registry/registry.yml
index 79b6a9504..d89ce855a 100644
--- a/roles/openshift_hosted/tasks/registry/registry.yml
+++ b/roles/openshift_hosted/tasks/registry/registry.yml
@@ -56,6 +56,13 @@
     openshift_hosted_registry_force:
     - False
 
+- name: oc adm policy add-cluster-role-to-user system:registry system:serviceaccount:default:registry
+  oc_adm_policy_user:
+    user: system:serviceaccount:default:registry
+    resource_kind: cluster-role
+    resource_name: system:registry
+    state: present
+
 - name: create the default registry service
   oc_service:
     namespace: "{{ openshift_hosted_registry_namespace }}"
-- 
cgit v1.2.1