Openshift: remove capability to create project

[pax94]

Hi all,

I'm training for the exam EX280 and I would like to know if there is the chance to remove the capability to create project on a single user.

I know this is possible cluster-wide, by removing the clusterrolebinding 'self-provisioners', which binds all authenticated users to the self-provisioner role.

But what I want to do is removing the possibility to create project only for a specific user, if that is possible.

[Rahul_Sil · Accepted solution]

What you can do is - 

1. Remove the cluster role binding 'self-provisioners'.

2. Create a group of users that should have the self-provisioner cluster role, and then assign the 'self-provisioner' cluster role to that group.

This way the specific user that you want will not have the project creation capability and the rest of the users will have. 

[pax94]

Many thanks!