jcline/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

openshift: disallow users self-provisioning

Browse source 
We don't want authenticated users being able to self provision projects
in our clusters. We only want that to happen via ansible.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2026-04-29 17:49:41 -07:00
commit 2b8fecb1f7
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/openshift/cluster/tasks/main.yaml
View file

@ -33,3 +33,7 @@
notify: Apply changes to openshift
tags:
- create-resources
# Disable users from creating projects
- name: disable default user project creation
ansible.builtin.command: oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth