Step: ipi-install-rbac

The pre-installation RBAC step adds necessary privileges for the cluster under test against the build farm.

Container image used for this step: cli

cli resolves to an image built or imported by the ci-operator configuration (documentation).

Environment

Step exposes no environmental variables except the defaults.

Source Code

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
#!/bin/bash

set -o nounset
set -o errexit
set -o pipefail

# This step wants to always talk to the build farm (via service account credentials) but ci-operator
# gives steps KUBECONFIG pointing to cluster under test under some circumstances, which is never
# the correct cluster to interact with for this step.
unset KUBECONFIG

# We want the test cluster to be able to access these images on the build farm
oc adm policy add-role-to-group system:image-puller system:authenticated --namespace "${NAMESPACE}"
oc adm policy add-role-to-group system:image-puller system:unauthenticated --namespace "${NAMESPACE}"

Properties

Property Value Description
Resource requests (cpu) 100m Used in .resources.requests of the pod running this step.
Resource requests (memory) 100Mi Used in .resources.requests of the pod running this step.

GitHub Link:

https://github.com/openshift/release/blob/master/ci-operator/step-registry/ipi/install/rbac/ipi-install-rbac-ref.yaml

Owners:

Approvers:

Source code for this page located on GitHub