Objective
- Create project my-project
- Create 2 Users project-admin & project-developer
- Assign admin role to user project-admin in project my-project
- Assign developer role to user project-developer in project my-project
Step 1: Set up OpenShift environment
Go to Katacoda.com & click on start scenario
Step 2: Set up utility
Install httpd tools
yum install httpd-tools
Create file to store user & password
touch passwordfile
Step 3: List projects
oc projects
Step 4: Create project
oc new-project my-project
Step 5: Create users
oc create user project-admin
htpasswd -b passwordfile project-admin pwd
oc create user project-developer
htpasswd -b passwordfile project-developer pwd
Step 6: Add admin role to user
oc policy add-role-to-user admin project-admin
Step 7: Add developer role to user
oc login -u project-admin -p pwd <SERVER_URL>
oc policy add-role-to-user edit project-developer
Step 8: List role bindings
oc get rolebindings
Step 9: Deploy application
oc login -u project-developer -p pwd <SERVER_URL>
oc new-app --name nginx -l app=demo --docker-image nginx:latest
Step 10: List pods
oc get pods
Step 11: View application logs
oc logs <POD_NAME>
Step 12: Create service account
oc create sa useroot
Step 13: Add scc anyuid to service account
oc adm policy add-scc-to-user anyuid -z useroot --as system:admin
Step 14: Patch DC with service account
oc get dc
oc patch dc/nginx --patch \
'{"spec":{"template":{"spec":{"serviceAccountName": "useroot"}}}}'
oc get pods --watch
Step 15: Browse application
oc get pods -o wide
curl http://<POD_IP>:80
Top comments (0)