SpringCloud/spring-cloud-kubernetes
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Replace cluster-view with cluster-reader

Browse Source 
Fixes #72
This commit is contained in:
Donovan Muller
2016-12-14 00:51:23 +02:00
committed by Ioannis Canellos
parent fae2ebe01f
commit 164fe70df7
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
readme.md
View File

@@ -390,10 +390,10 @@ For earlier version it needs to be specified as an env var to the pod. A quick w
#### Service Account
For distros of Kubernetes that support more fine-grained role-based access within the cluster, you need to make sure a pod that runs with spring-cloud-kubernetes has access to the Kubernetes API. For example, OpenShift has very comprehensive security measures that are on by default (typically) in a shared cluster. For any service accounts you assign to a deployment/pod, you need to make sure it has the correct roles. For example, you can add `cluster-view` permissions to your `default` service account depending on the project you're in:
For distros of Kubernetes that support more fine-grained role-based access within the cluster, you need to make sure a pod that runs with spring-cloud-kubernetes has access to the Kubernetes API. For example, OpenShift has very comprehensive security measures that are on by default (typically) in a shared cluster. For any service accounts you assign to a deployment/pod, you need to make sure it has the correct roles. For example, you can add `cluster-reader` permissions to your `default` service account depending on the project you're in:
```
oc policy add-role-to-user cluster-view system:serviceaccount:<project/namespace>:default
oc policy add-role-to-user cluster-reader system:serviceaccount:<project/namespace>:default
```
### Building