[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: I try to append role to user but it's not visible with oc policy who-can, why ?



`oc get rolebindings` shows you the users, groups, and service accounts that are bound to roles in a given project

On Wed, Jun 15, 2016 at 12:24 PM, Stéphane Klein <contact stephane-klein info> wrote:
Thanks, ok it's working.

So, how can I get the complete list of relation between « project - role - user / group » ?

Best regards,
Stéphane

2016-06-15 18:03 GMT+02:00 Jordan Liggitt <jliggitt redhat com>:
"who-can" takes an API verb and resource, not a role name (something like `who-can get pods`). I think it's only listing the users who can do any verb (*) on any resource (*).

On Wed, Jun 15, 2016 at 11:57 AM, Stéphane Klein <contact stephane-klein info> wrote:
Hi,

I try to append role to user:

```
$ oc policy add-role-to-user admin user1  -n myproject
$ oc policy who-can admin myproject
Namespace: myproject
Verb:      admin
Resource:  myproject

Users:  admin
        sklein

Groups: system:cluster-admins
        system:masters
```

I don't understand why user1 isn't in who-can user list ?

Where is my mistake ?

Best regards,
Stéphane

_______________________________________________
users mailing list
users lists openshift redhat com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users





--


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]