NO. I already checked. Version also throwing 403

HTTP/1.1 403 Forbidden
Cache-Control: no-store
Content-Type: application/json
Date: Thu, 09 Feb 2017 22:39:12 GMT
Content-Length: 217



--
Srinivas Kotaru

From: Mateus Caruccio <[email protected]>
Date: Thursday, February 9, 2017 at 2:34 PM
To: Srinivas Naga Kotaru <[email protected]>
Cc: Jordan Liggitt <[email protected]>, dev <[email protected]>
Subject: Re: API health or status page

Isn't /version open by default?

--
Mateus Caruccio / Master of Puppets
GetupCloud.com - Eliminamos a Gravidade

On Thu, Feb 9, 2017 at 8:30 PM, Srinivas Naga Kotaru (skotaru) 
<[email protected]<mailto:[email protected]>> wrote:
Perfect. Thank you very much Jordan. Appreciated for quick help

--
Srinivas Kotaru

From: Jordan Liggitt <[email protected]<mailto:[email protected]>>
Date: Thursday, February 9, 2017 at 2:26 PM

To: Srinivas Naga Kotaru <[email protected]<mailto:[email protected]>>
Cc: dev <[email protected]<mailto:[email protected]>>
Subject: Re: API health or status page

See the cluster-status role as an example:

oc export clusterroles cluster-status -o yaml > myrole.yaml
Change the name to a custom name, and include only the urls you would want 
anonymous users to access
Then create the custom role:
oc create -f myrole.yaml
And grant it to anonymous users:
oadm policy add-cluster-role-to-group my-role-name system:unauthenticated


On Thu, Feb 9, 2017 at 5:18 PM, Srinivas Naga Kotaru (skotaru) 
<[email protected]<mailto:[email protected]>> wrote:
That is interesting, indeed what I want.

Can you share step by step or any document which explains?


--
Srinivas Kotaru

From: Jordan Liggitt <[email protected]<mailto:[email protected]>>
Date: Thursday, February 9, 2017 at 1:57 PM
To: Srinivas Naga Kotaru <[email protected]<mailto:[email protected]>>
Cc: dev <[email protected]<mailto:[email protected]>>
Subject: Re: API health or status page

You can set up a role that allows access to the API endpoints you want, and 
bind that role to the `system:unauthenticated` group, and it will allow 
accessing that API without any authentication.

On Thu, Feb 9, 2017 at 4:55 PM, Srinivas Naga Kotaru (skotaru) 
<[email protected]<mailto:[email protected]>> wrote:
Can I use any API call without authentication? I need an API URL to put into my 
monitoring agent to periodically check health. All most all API calls need 
token or authentication. Although I can use a service account and use secret as 
a token since it doesn’t expire, am looking for a simple solution if possible



--
Srinivas Kotaru

_______________________________________________
dev mailing list
[email protected]<mailto:[email protected]>
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev



_______________________________________________
dev mailing list
[email protected]<mailto:[email protected]>
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

_______________________________________________
dev mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

Reply via email to