Task:
Create the administrative account and roles for management of Domino services on K8s, OKD, or OCP 4.
Overview:
- Create project
- Create service account
- Create role
- Assign role-binding
Notes:
- Project: mwdom
- Administrators Account: domino-admin
Steps:
1. Create project/namespace:
- Login:
$ oc login -u <accountid>
<enter password>
- Create project:
$ oc new-project mwdom
<confirm created>
2. Create Service Account and Set-up:
$ oc create serviceaccount domino-admin
<confirm created>
$ vi mwdom-role.yaml
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: domino-admin-role
namespace: mwdom
rules:
- apiGroups: [""]
resources: ["pods", "persistentvolumeclaims" ]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
$ oc apply -f mwdom-role.yaml
<confirm added>
$ vi mwdom-rolebinding.yaml
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: domino-admin-role-binding
namespace: mwdom
subjects:
- kind: ServiceAccount
name: domino-admin
namespace: mwdom
roleRef:
kind: Role
name: domino-admin-role
apiGroup: rbac.authorization.k8s.io
$ oc apply -f mwdom-rolebinding.yaml
<confirm added>
previous page
|