Add docs on troubleshooting policies/permissions, add missing perms

Change-Id: Iaf308d9ecfabb07547bfbe06fb98d0a58e91cc7e
rdo-infra · Jun 20, 2017 · 03ae72f · 03ae72f
1 parent af23f9a
commit 03ae72f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/doc/source/managing.rst b/doc/source/managing.rst
@@ -27,3 +27,7 @@ Managing the registry
     # Allow authenticated users to browse the TripleO project
     # Note: https://github.com/cockpit-project/cockpit/issues/6711
     oc policy add-role-to-group registry-viewer system:authenticated -n tripleo
+
+    # Allow unauthenticated users to pull images from the TripleO project
+    # (Anonymous, public access to registry, not the actual console)
+    oc policy add-role-to-group registry-viewer system:unauthenticated -n tripleo
diff --git a/doc/source/troubleshooting.rst b/doc/source/troubleshooting.rst
@@ -28,3 +28,5 @@ Troubleshooting the registry
     oc get pods -n default
     oc exec -n default <pod name> <command> (ex: oc exec -n default docker-registry-1-xgxqb ls)
 
+    # Look at policies and permissions for a project
+    oc get rolebindings -n project