Skip to content

simple-test-opsmgr template creates PVC: cluster-admin policy needed #15

@vap0rtranz

Description

@vap0rtranz

minishift account that's creating the simple-test-opsmgr template will need to have cluster-admin privledge to create PVCs. Steps for doing this in minishift:
minishift addons enable cluster-admin
...
oc login -u system:admin
OR
oc adm policy add-cluster-role-to-user cluster-admin admin

oc create -f ./simple-test-opsmgr.yaml
Error from server (Forbidden): error when creating "./simple-test-opsmgr.yaml": persistentvolumes is forbidden: User "admin" cannot create persistentvolumes at the cluster scope: User "admin" cannot create persistentvolumes at the cluster scope
oc policy can-i --list --ignore-scopes | grep create
Command "can-i" is deprecated, use 'oc auth can-i'
[create get]       []                       []               []                             [buildconfigs/webhooks]
[create get]       []                       []               [build.openshift.io]           [buildconfigs/webhooks]
[create]           []                       []               []                             [builds/docker]
[create]           []                       []               [build.openshift.io]           [builds/docker]
[create]           []                       []               []                             [builds/jenkinspipeline]
[create]           []                       []               [build.openshift.io]           [builds/jenkinspipeline]
[create]           []                       []               []                             [builds/optimizeddocker]
[create]           []                       []               [build.openshift.io]           [builds/optimizeddocker]
[create]           []                       []               []                             [builds/source]
[create]           []                       []               [build.openshift.io]           [builds/source]
[create list]      []                       []               []                             [projectrequests]
[create list]      []                       []               [project.openshift.io]         [projectrequests]
[create]           []                       []               [authorization.k8s.io]         [selfsubjectaccessreviews]
[create]           []                       []               []                             [selfsubjectrulesreviews]
[create]           []                       []               [authorization.k8s.io]         [selfsubjectrulesreviews]
[create]           []                       []               [authorization.openshift.io]   [selfsubjectrulesreviews]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions