Bug 1324571

Summary: Setting up aggregate container logs references non-existent (cluster)roles
Product: OpenShift Container Platform Reporter: Eric Jones <erjones>
Component: DocumentationAssignee: Alex Dellapenta <adellape>
Status: CLOSED CURRENTRELEASE QA Contact: Vikram Goyal <vigoyal>
Severity: unspecified Docs Contact: Vikram Goyal <vigoyal>
Priority: unspecified    
Version: 3.1.0CC: adellape, aos-bugs, ccoleman, erich, jokerman, lmeyer, mmccomas
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-07 13:07:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Eric Jones 2016-04-06 16:22:19 UTC 
Document URL: 
https://docs.openshift.com/enterprise/3.1/install_config/aggregate_logging.html#pre-deployment-configuration

Section Number and Name: 
Pre-deployment Configuration
Step 6.

Describe the issue: 
Step 6 tells you to deploy a service account and "Then, enable the logging-deployer service account to create the objects needed for a logging deployment."

It provides the following CLI info for the user to follow.

$ oc policy add-role-to-user edit --serviceaccount logging-deployer
$ oc policy add-role-to-user daemonset-admin --serviceaccount logging-deployer
$ oadm policy add-cluster-role-to-user oauth-editor \
       system:serviceaccount:logging:logging-deployer

and the role daemonset-admin and the clusterrole oauth-editor do not exist.

Suggestions for improvement: 
Create these and explain them, or remove them.
Comment 1 Clayton Coleman 2016-04-06 17:16:44 UTC 
They don't exist before 3.2
Comment 3 Luke Meyer 2016-04-06 17:49:23 UTC 
I wasn't careful enough in distinguishing origin docs and 3.1 docs in my docs PR.

For Enterprise, should not need these:

$ oc policy add-role-to-user daemonset-admin --serviceaccount logging-deployer
$ oadm policy add-cluster-role-to-user oauth-editor \
       system:serviceaccount:logging:logging-deployer


It's fine to proceed if those fail.
Comment 4 Alex Dellapenta 2016-04-06 17:51:40 UTC 
I'm fixing now and will push an update for OSE docs today.
Comment 5 openshift-github-bot 2016-04-06 19:26:16 UTC 
Commit pushed to master at https://github.com/openshift/openshift-docs

https://github.com/openshift/openshift-docs/commit/ac5cf86dc6846101454336c6e8a1acc3a87648b6
Merge pull request #1869 from adellape/fix_logifdef

Bug 1324571: Fix ifdef for logging
Comment 6 Alex Dellapenta 2016-04-06 19:53:56 UTC 
Manually published the Customer Portal version just now:

https://access.redhat.com/documentation/en/openshift-enterprise/version-3.1/installation-and-configuration/#wed-apr-06-2016

I'll let the nightly job pick it up for the docs.openshift.com build.
Comment 7 Alex Dellapenta 2016-04-07 13:07:08 UTC 
docs.openshift.com build is now updated as well:

https://docs.openshift.com/enterprise/latest/welcome/revhistory_full.html#wed-apr-06-2016