Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Browse files
Browse the repository at this point in the history
Create a cluster-role for an apb the requires elevated privilages
This patch is intented to enable apbs that access resources across namespaces or creates cluster level resources to work.
To try this out you'll need a few things:
1) The asb user needs to have cluster-admin permissions in order to give cluster-admin permission
```
oc adm policy add-cluster-role-to-user cluster-admin -n ansible-service-broker -z asb
```
2) The broker config must have ```auto-escalate: true``` and ```sandbox_role: cluster-admin```.
3) Build and Deploy the broker with this patch.
```
git checkout -b cluster-role-access
git pull https://github.com/rthallisey/ansible-service-broker.git cluster-role-access
make build-image ORG=<my-registry>
make deploy ORG=<my-registry>
```- Loading branch information