fedora-infrastructure

#10272 Elevated privileges on our ocp cluster
Closed: Fixed by kevin. Opened by scoady.

Closed: Fixed
Reopen Issue

Describe what you would like us to do:

Hi. I am working on the fedora coreos initiative to migrate their pipelines from the current centos OCP to the fedora one. This means I need access to create namespaces, PVCs and also to be able to grant permissions myself if possible.

Also, is CLI access allowed to this cluster? At the moment I receive a 401 unauthorised.

Thanks in advance.

So, I can add you to the sysadmin-openshift group. This allows you to login to os-control01.iad2.fedoraproject.org and run oc commands there.

NOTE: we do NOT want admins to manually add namespaces or the like. Projects/apps should be deployed from ansible. There are of course exceptions... we also should have dynamic storage in the new cluster (unless it needs a nfs volume, in which case it will need to be manual for now (although we should perhaps move this into ansible too))

Currently the api isn't available from external, but I am planning to get ports opened so we can do that.

Happy to provide more info, etc. :)

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

No problem, even better that it should be automated. Thanks for that nirik.
Metadata
None
None
None
None
Lowest
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.