On Tue, Mar 28, 2017 at 4:47 PM, Hardy Ferentschik <[email protected]> wrote:
> Hi, > > > OK, but when I login into the console as 'developer' and 'developer', I > do > > not see the OpenShift namespace/project like a "administrator" would. > > and you want to see this why? > I am adding templates and image streams in order to use the FIS capabilities we offer > > > The ultimate goal is to let the human (end-user) log in to the console as > > the Admin so he/she can see their work. > > This part I don't get. A user should not create application (their work) > in the default/openshift namespace. They are reserved namespaces. > Your work is in 'myproject' or any other namespace you are going to create. > I said "see" not "create" :-) > > > Right now, I would say our current approach of system:admin with no > > password is a bug > > AFAIU, there is even no other way then to use certificate based > authentication > for sytem:admin. This account is special. You literally cannot login any > other way. This is different to the 'admin' user in CDK. In CDK we had an > 'admin' user (on top of the openshift-dev user) which got assigned the > cluster admin role - https://github.com/projectatomic/adb-utils/blob/ > master/services/openshift/scripts/openshift_provision#L196 > > So one can add the same role to the developer user in Minishift, either > per default or via an addon (something we are working on right now) or > one creates another admin user as per CDK. Addon might be the best way to > go. > I do not care if the user is "foomanchew" and the password is "haveaniceday" but I do need access to web console as the "super user"/"cluster admin" of the openshift instance. It is my personal openshift instance, why can't I be the administrator? > > --Hardy > > >
_______________________________________________ Devtools mailing list [email protected] https://www.redhat.com/mailman/listinfo/devtools
