`oc get rolebindings` shows you the users, groups, and service accounts
that are bound to roles in a given project

On Wed, Jun 15, 2016 at 12:24 PM, Stéphane Klein <
[email protected]> wrote:

> Thanks, ok it's working.
>
> So, how can I get the complete list of relation between « project - role -
> user / group » ?
>
> Best regards,
> Stéphane
>
> 2016-06-15 18:03 GMT+02:00 Jordan Liggitt <[email protected]>:
>
>> "who-can" takes an API verb and resource, not a role name (something like
>> `who-can get pods`). I think it's only listing the users who can do any
>> verb (*) on any resource (*).
>>
>> On Wed, Jun 15, 2016 at 11:57 AM, Stéphane Klein <
>> [email protected]> wrote:
>>
>>> Hi,
>>>
>>> I try to append role to user:
>>>
>>> ```
>>> $ oc policy add-role-to-user admin user1  -n myproject
>>> $ oc policy who-can admin myproject
>>> Namespace: myproject
>>> Verb:      admin
>>> Resource:  myproject
>>>
>>> Users:  admin
>>>         sklein
>>>
>>> Groups: system:cluster-admins
>>>         system:masters
>>> ```
>>>
>>> I don't understand why user1 isn't in who-can user list ?
>>>
>>> Where is my mistake ?
>>>
>>> Best regards,
>>> Stéphane
>>> --
>>> Stéphane Klein <[email protected]>
>>> blog: http://stephane-klein.info
>>> cv : http://cv.stephane-klein.info
>>> Twitter: http://twitter.com/klein_stephane
>>>
>>> _______________________________________________
>>> users mailing list
>>> [email protected]
>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>
>>>
>>
>
>
> --
> Stéphane Klein <[email protected]>
> blog: http://stephane-klein.info
> cv : http://cv.stephane-klein.info
> Twitter: http://twitter.com/klein_stephane
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to