Re: projectRequests in openshift v3.6 using serviceaccount jenkins

2018-05-03 Thread Jordan Liggitt
By default, service accounts do not have access to request projects. If you want to grant that permission, it is contained in the self-provisioner cluster role, which you can grant like this: oc adm add-cluster-role-to-user self-provisioner system:serviceaccount:: On Thu, May 3, 2018 at 5:52

Re: projectRequests in openshift v3.6 using serviceaccount jenkins

2018-05-03 Thread jelmer van amen
p.s I found that curl -k -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json' https://kubernetes.default.svc/oapi/v1/projectrequests Gives a similar result { "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "You may not

projectRequests in openshift v3.6 using serviceaccount jenkins

2018-05-03 Thread jelmer van amen
Hi all, I'm trying to get arquillian-cube working from jenkins. Arquillian cube want's to create new namepsaces to spin up the tests. To do this, it calls curl -k -H "Authorization: Bearer $TOKEN" -H 'Accept: application/json'