pax94
Mission Specialist
Mission Specialist
  • 562 Views

Openshift: remove capability to create project

Jump to solution

Hi all,

I'm training for the exam EX280 and I would like to know if there is the chance to remove the capability to create project on a single user.

I know this is possible cluster-wide, by removing the clusterrolebinding 'self-provisioners', which binds all authenticated users to the self-provisioner role.

But what I want to do is removing the possibility to create project only for a specific user, if that is possible.

Labels (3)
1 Solution

Accepted Solutions
Rahul_Sil
Mission Specialist
Mission Specialist
  • 529 Views

What you can do is - 

1. Remove the cluster role binding 'self-provisioners'.

2. Create a group of users that should have the self-provisioner cluster role, and then assign the 'self-provisioner' cluster role to that group.

This way the specific user that you want will not have the project creation capability and the rest of the users will have. 

View solution in original post

0 Kudos
2 Replies
Rahul_Sil
Mission Specialist
Mission Specialist
  • 530 Views

What you can do is - 

1. Remove the cluster role binding 'self-provisioners'.

2. Create a group of users that should have the self-provisioner cluster role, and then assign the 'self-provisioner' cluster role to that group.

This way the specific user that you want will not have the project creation capability and the rest of the users will have. 

0 Kudos
pax94
Mission Specialist
Mission Specialist
  • 521 Views
Many thanks!
Join the discussion
You must log in to join this conversation.