Skip to content

Commit

Permalink
Merge pull request #11 from makentenza/ldap-sync-review
Browse files Browse the repository at this point in the history
Ldap sync review
  • Loading branch information
etsauer authored Nov 2, 2017
2 parents 23fb784 + 0f6dd48 commit 9f0f966
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 3 deletions.
5 changes: 3 additions & 2 deletions jobs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,13 +64,14 @@ The `scheduledjob-ldap-group-sync` template creates several objects in OpenShift

To instantiate the template, run the following.

1. Create a project in which to host your jobs. Currently the template requires that it be created in a project called `cluster-ops`. This will become more flexible in future versions of OpenShift.
1. Create a project in which to host your jobs.
```
oc new-project cluster-ops
oc new-project <project>
```
2. Instantiate the template
```
oc process -f jobs/scheduledjob-ldap-group-sync.yml \
-p NAMESPACE="<project name from previous step>"
-p LDAP_URL="ldap://idm-2.etl.rht-labs.com:389" \
-p LDAP_BIND_DN="uid=ldap-user,cn=users,cn=accounts,dc=myorg,dc=example,dc=com" \
-p LDAP_BIND_PASSWORD="password1" \
Expand Down
6 changes: 5 additions & 1 deletion jobs/scheduledjob-ldap-group-sync.yml
Original file line number Diff line number Diff line change
Expand Up @@ -108,14 +108,18 @@ objects:
- kind: ServiceAccount
name: ${JOB_SERVICE_ACCOUNT}
userNames:
- system:serviceaccount:cluster-ops:${JOB_SERVICE_ACCOUNT}
- system:serviceaccount:${NAMESPACE}:${JOB_SERVICE_ACCOUNT}
- apiVersion: v1
kind: ServiceAccount
metadata:
name: ${JOB_SERVICE_ACCOUNT}
labels:
template: "scheduledjob-ldap-group-sync"
parameters:
- name: "NAMESPACE"
displayName: "Namespace"
description: "Name of the Namespace where to deploy the Scheduled Job"
required: true
- name: "JOB_NAME"
displayName: "Job Name"
description: "Name of the Scheduled Job to Create."
Expand Down

0 comments on commit 9f0f966

Please sign in to comment.