openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-07 00:48:01 +01:00
Code Issues Releases Activity

OSDOCS#8972: Noting that the deployer service account isn't created if the DeploymentConfig capability is disabled

Browse Source
This commit is contained in:
Andrea Hoffer
2024-02-09 11:46:43 -05:00
parent e9404c7358
commit cdcccf7c77
2 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
modules/deployment-config-capability.adoc
View File

@@ -13,5 +13,11 @@ The `DeploymentConfig` capability enables and manages the `DeploymentConfig` API
[IMPORTANT]
====
If the `DeploymentConfig` capability is disabled, the cluster cannot use `DeploymentConfig` resources. Disable the capability only if `DeploymentConfig` resources are not required in the cluster.
If you disable the `DeploymentConfig` capability, the following resources will not be available in the cluster:
* `DeploymentConfig` resources
* The `deployer` service account
Disable the `DeploymentConfig` capability only if you do not require `DeploymentConfig` resources and the `deployer` service account in the cluster.
====

13
modules/service-accounts-default.adoc
View File

@@ -18,7 +18,7 @@ cluster-wide:
[cols="1,3",options="header"]
|====
|Service Account |Description
|Service account |Description
|`replication-controller`
|Assigned the `system:replication-controller` role
@@ -51,9 +51,9 @@ policyConfig:
Three service accounts are automatically created in each project:
[options="header",cols="1,3"]
[options="header",cols="1,3a"]
|===
|Service Account |Usage
|Service account |Usage
|`builder`
|Used by build pods. It is given the `system:image-builder` role, which allows
@@ -64,10 +64,15 @@ registry.
|Used by deployment pods and given the `system:deployer` role, which allows
viewing and modifying replication controllers and pods in the project.
[NOTE]
====
The `deployer` service account is not created if the `DeploymentConfig` cluster capability is not enabled.
====
|`default`
|Used to run all other pods unless they specify a different service account.
|===
All service accounts in a project are given the `system:image-puller` role,
which allows pulling images from any imagestream in the project using the
which allows pulling images from any image stream in the project using the
internal container image registry.