Missing role bindings? about ods-provisioning-app

[michaelsauter]

I think we should try to put it into the templates used by Tailor. I can give that a shot and if it does not work nicely, we can add it to the getting started guide ...

[clemensutschig]

@michaelsauter - yup .. I think this is the most sutainable way - and it also allows people to test the rundeck setup @tjaeschke - thoughts?

[michaelsauter]

I'd say yes - if it comes up again, we can open again.

[michaelsauter]

Hmm, could be that they are missing. In theory we can import any resource, so we can also include the rolebinding. I guess I did not include them as I thought all those were added automatically ...

[tjaeschke]

Talked with Clemens about it yesterday. If you provision an app with the prov app, the bindings are set automatically in the provison scripts, but not, if you import something manually. Maybe it's a cluster configuration thing.

[clemensutschig]

@michaelsauter / @tjaeschke - this is expected - and either needs to go into the getting started - or into tailor. make a call and implement it that way :)

[clemensutschig]

@michaelsauter - whats the Status of this? .. I have an idea actually - if rundeck setup is done - you could just run openshift/create-projects which would create the whole set including role bindings :) ...

[michaelsauter]

@clemensutschig The status is that I did not look into this since my comment ... do you want to continue with your idea?

[tjaeschke]

@clemensutschig I've thought about it and I agree with you. I think this would be a good way to test the rundeck setup and if successful to have the projects in Openshift.

[clemensutschig]

@tjaeschke / @michaelsauter - with the new setup (webhook proxy - and no need for pipelines in *cd) in v1.. we could in fact remove *cd from the ocp config ... and then have rundeck provision the project..

thoughts?

[michaelsauter]

@clemensutschig Right now we create a pipeline for the prov app even in v1 because users might never push to the prov app repo (after the initial creation), therefore there would be no pipeline to trigger the initial deployment ...

[tjaeschke]

@michaelsauter I think this issue can be closed, can't it?