Re: cluster wide service acount

2016-12-01 Thread Jordan Liggitt
*Thursday, December 1, 2016 at 1:39 PM > > *To: *Srinivas Naga Kotaru <skot...@cisco.com> > *Cc: *dev <dev@lists.openshift.redhat.com> > *Subject: *Re: cluster wide service acount > > > > One token is the one generated to mount into pods that run as the ser

Re: cluster wide service acount

2016-12-01 Thread Srinivas Naga Kotaru (skotaru)
:26 PM To: Srinivas Naga Kotaru <skot...@cisco.com> Cc: dev <dev@lists.openshift.redhat.com> Subject: Re: cluster wide service acount If you have the service account's token, you can use it from the command line like this: oc login --token=... The web console does not pr

Re: cluster wide service acount

2016-12-01 Thread Srinivas Naga Kotaru (skotaru)
:04 PM To: Srinivas Naga Kotaru <skot...@cisco.com> Cc: dev <dev@lists.openshift.redhat.com> Subject: Re: cluster wide service acount Service accounts exist within a namespace but can be granted permissions across the entire cluster, just like any other user. For example: oadm policy add-cl