openstack
/
kuryr-kubernetes
Code Issues Proposed changes

Merge "Add `privileged` SCC to SA in OpenShift DevStack" into stable/queens

This commit is contained in:
Zuul 2018-04-20 13:39:11 +00:00 committed by Gerrit Code Review
parent 936fea38d5 5b9b4fcf66
commit e04d930e94
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
devstack/plugin.sh
View File

@ -143,6 +143,11 @@ function run_containerized_kuryr_resources {
/usr/local/bin/kubectl create -f \
"${k8s_data_dir}/service_account.yml" \
|| die $LINENO "Failed to create kuryr-kubernetes ServiceAccount."
if is_service_enabled openshift-master; then
# NOTE(dulek): For OpenShift add privileged SCC to serviceaccount.
/usr/local/bin/oadm policy add-scc-to-user privileged -n kube-system -z kuryr-controller
fi
/usr/local/bin/kubectl create -f \
"${k8s_data_dir}/controller_deployment.yml" \
|| die $LINENO "Failed to create kuryr-kubernetes Deployment."