Perfect. Thank you very much Jordan. Appreciated for quick help

--
Srinivas Kotaru

From: Jordan Liggitt <[email protected]>
Date: Thursday, February 9, 2017 at 2:26 PM
To: Srinivas Naga Kotaru <[email protected]>
Cc: dev <[email protected]>
Subject: Re: API health or status page

See the cluster-status role as an example:

oc export clusterroles cluster-status -o yaml > myrole.yaml

Change the name to a custom name, and include only the urls you would want 
anonymous users to access
Then create the custom role:
oc create -f myrole.yaml
And grant it to anonymous users:
oadm policy add-cluster-role-to-group my-role-name system:unauthenticated


On Thu, Feb 9, 2017 at 5:18 PM, Srinivas Naga Kotaru (skotaru) 
<[email protected]<mailto:[email protected]>> wrote:
That is interesting, indeed what I want.

Can you share step by step or any document which explains?


--
Srinivas Kotaru

From: Jordan Liggitt <[email protected]<mailto:[email protected]>>
Date: Thursday, February 9, 2017 at 1:57 PM
To: Srinivas Naga Kotaru <[email protected]<mailto:[email protected]>>
Cc: dev <[email protected]<mailto:[email protected]>>
Subject: Re: API health or status page

You can set up a role that allows access to the API endpoints you want, and 
bind that role to the `system:unauthenticated` group, and it will allow 
accessing that API without any authentication.


On Thu, Feb 9, 2017 at 4:55 PM, Srinivas Naga Kotaru (skotaru) 
<[email protected]<mailto:[email protected]>> wrote:
Can I use any API call without authentication? I need an API URL to put into my 
monitoring agent to periodically check health. All most all API calls need 
token or authentication. Although I can use a service account and use secret as 
a token since it doesn’t expire, am looking for a simple solution if possible



--
Srinivas Kotaru

_______________________________________________
dev mailing list
[email protected]<mailto:[email protected]>
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev


_______________________________________________
dev mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

Reply via email to