Bug 1277986 - Need to be able to reconcile new SCCs when upgrading
Summary: Need to be able to reconcile new SCCs when upgrading
Alias: None
Product: OKD
Classification: Red Hat
Component: oc
Version: 3.x
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
: ---
Assignee: Paul Weil
QA Contact: Wei Sun
Depends On:
TreeView+ depends on / blocked
Reported: 2015-11-04 13:35 UTC by Paul Weil
Modified: 2016-01-06 04:45 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2015-11-23 21:14:05 UTC
Target Upstream Version:

Attachments (Terms of Use)

Description Paul Weil 2015-11-04 13:35:25 UTC
Description of problem:

When upgrading a cluster there needs to be a way to reconcile SCCs that are in the new code against existing cluster SCCs.  This needs to be a cli command.

The command should

1.  Always reconcile the definitions (everything except users, groups, and priority)
2.  Have an option to overwrite users, groups, and priority
3.  Always reconcile nil priorities with new values if set
4.  Show what will be reconciled and not save changes until --confirm is issued

Comment 1 Paul Weil 2015-11-04 13:36:01 UTC
PR https://github.com/openshift/origin/pull/5606

Comment 2 Jordan Liggitt 2015-11-04 22:16:53 UTC
Additionally, an upgrade from 3.0.2 to 3.1 will pick up new default SCCs on server start, but will need a `oadm policy reconcile-sccs --confirm` to update any changed definitions

Comment 3 weiwei jiang 2015-11-05 07:16:30 UTC
Checked with devenv_rhel7_2638, and work well.

Note You need to log in before you can comment on or make changes to this bug.