Bug 1313556 - Include service account and secret creation in XPAAS templates.
Summary: Include service account and secret creation in XPAAS templates.
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Templates
Version: 3.2.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: kconner
QA Contact: XiuJuan Wang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-01 21:56 UTC by Ryan Howe
Modified: 2019-10-10 11:24 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-28 18:14:28 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Ryan Howe 2016-03-01 21:56:54 UTC
Description of problem:
Quickstart templates need to create the service account and secret as these templates are meant to be kicked off from the webconsole. Users should not have to access the CLI to create the needed object to use these quickstarts. 


An Example template that requires the creation of  jws-app-secret and jws-service-account is jws30-tomcat8-mysql-s2i template. 



Version-Release number of selected component (if applicable): 3.1.1.6


How reproducible:100%


Steps to Reproduce:
1. oc new-app --template=jws30-tomcat8-mysql-s2i

Actual results:
$ oc status

Errors:
  * The image trigger for dc/jws-app-mysql will have no effect because is/mysql does not exist.
Warnings:
  * rc/jws-app-1 is attempting to mount a secret secret/jws-app-secret disallowed by sa/jws-service-account
  * rc/jws-app-1 is attempting to mount a missing secret secret/jws-app-secret
  * dc/jws-app is attempting to mount a secret secret/jws-app-secret disallowed by sa/jws-service-account
  * dc/jws-app is attempting to mount a missing secret secret/jws-app-secret

Expected results:

The jws-app-secret and jws-service-account gets created with the template. 

Additional info:

https://github.com/jboss-openshift/application-templates/tree/master/docs
https://github.com/jboss-openshift/application-templates
http://ce-docs.usersys.redhat.com/openshift/webserver-tomcat8/3.0/s2i.html

Comment 1 kconner 2016-03-03 01:23:38 UTC
We considered this however decided not to go down this route since we currently see the service account creation as distinct from the templates, especially as these service accounts contain secrets that we expect the user to create independently of the templates.

Comment 2 Andy Goldstein 2016-03-28 18:14:28 UTC
Replaced by a docs bz, https://bugzilla.redhat.com/show_bug.cgi?id=1313493.


Note You need to log in before you can comment on or make changes to this bug.