Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

developer user needs access to internal registry #19

Open
jodyhuntatx opened this issue Aug 2, 2018 · 0 comments
Open

developer user needs access to internal registry #19

jodyhuntatx opened this issue Aug 2, 2018 · 0 comments

Comments

@jodyhuntatx
Copy link
Member

To push images to the Openshift repo, the system:admin needs to grant access to the developer user. That's not in the deployment scripts. I wrote this, should probably go in the 1_create_conjur_namespace.sh script.
This may grant excessive privileges so some scrutiny/testing is warranted.

$ cat grant-user-access.sh
#!/bin/bash
if [[ $# -ne 1 ]]; then
echo "Provide name of developer user..."
exit -1
fi
USER=$1
oc adm policy add-role-to-user system:registry $USER
oc adm policy add-role-to-user system:image-builder $USER

oc adm policy add-role-to-user admin developer -n default
oc adm policy add-role-to-user admin developer -n $CONJUR_NAMESPACE_NAME

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant