[Devtools] CDK 3.x system:admin login

[Burr Sutter]

On Tue, Mar 28, 2017 at 11:29 AM, Budh Gurung <bgurung at redhat.com> wrote:

> Hi Burr,
>
> On Tue, Mar 28, 2017 at 8:06 PM, Burr Sutter <bsutter at redhat.com> wrote:
>
>>
>>
>> On Tue, Mar 28, 2017 at 8:33 AM, Steve Speicher <sspeiche at redhat.com>
>> wrote:
>>
>>>
>>> On Mon, Mar 27, 2017 at 7:55 PM, Rafael Benevides <benevides at redhat.com>
>>> wrote:
>>>
>>>> Hi,
>>>>
>>>> Regarding the system:admin login I have two questions:
>>>>
>>>> 1 - How can I login as admin in the web console?
>>>>
>>> You can't. If you want admin priviledges from the console, you'll need
>>> to grant a regular user those privileges (like "developer")
>>>
>>
>> what is the oc command to do this?  I can add it to my getting started
>> doc for the CDK.
>>
>
> For CDK/minishift, we have given sudoer role to 'developer' and now
> developer can perform any admin tasks as:
> $ oc get node --as system:admin
>
> We have taken the reference from this link [1]
>
>
OK, but when I login into the console as 'developer' and 'developer', I do
not see the OpenShift namespace/project like a "administrator" would.

The ultimate goal is to let the human (end-user) log in to the console as
the Admin so he/she can see their work.

Right now, I would say our current approach of system:admin with no
password is a bug.  Previous versions of the CDK allowed admin and console
access.



>
> [1] https://bierkowski.com/openshift-cli-morsels-sudo-and-user-
> impersonation/
>
>>
>>
>>
>>
>>> 2 - Given the the system:admin uses a credential for the internal ip,
>>>> how can I login as admin when I'm running minishift/"oc cluster up" in a
>>>> cloud, but I want to use oc in my local machine?
>>>>
>>> Thinks same as above.
>>>
>>>>
>>>> I'm wondering that a admin with a password credential should be
>>>> provided just as CDK 2.x
>>>>
>>> Perhaps, if that scenario is needed for all or something you can
>>> bootstrap in your setup.
>>>
>>> - Steve
>>>
>>>>
>>>> Thank you.
>>>>
>>>> --
>>>> *Rafael Benevides | Senior Product Manager*
>>>> Director of Developer Experience
>>>> Follow me at Twitter: @rafabene <https://twitter.com/rafabene>
>>>> M: +1-407-401-3555 <(407)%20401-3555>
>>>> Register today at https://developers.redhat.com/
>>>>
>>>> _______________________________________________
>>>> Devtools mailing list
>>>> Devtools at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/devtools
>>>>
>>>>
>>>
>>
>> _______________________________________________
>> Devtools mailing list
>> Devtools at redhat.com
>> https://www.redhat.com/mailman/listinfo/devtools
>>
>>
> Regards,
> Budh Ram Gurung
> Software Engineer - Devtools
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/devtools/attachments/20170328/ed553727/attachment.htm>