mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-06 06:46:26 +01:00
63 lines
1.3 KiB
Plaintext
63 lines
1.3 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * cli_reference/openshift_cli/administrator-cli-commands.adoc
|
|
|
|
[id="cli-security-policy-commands_{context}"]
|
|
= Security and policy CLI commands
|
|
|
|
== certificate
|
|
|
|
Approve or reject certificate signing requests (CSRs).
|
|
|
|
.Example: Approve a CSR
|
|
[source,terminal]
|
|
----
|
|
$ oc adm certificate approve csr-sqgzp
|
|
----
|
|
|
|
== groups
|
|
|
|
Manage groups in your cluster.
|
|
|
|
.Example: Create a new group
|
|
[source,terminal]
|
|
----
|
|
$ oc adm groups new my-group
|
|
----
|
|
|
|
== new-project
|
|
|
|
Create a new project and specify administrative options.
|
|
|
|
.Example: Create a new project using a node selector
|
|
[source,terminal]
|
|
----
|
|
$ oc adm new-project myproject --node-selector='type=user-node,region=east'
|
|
----
|
|
|
|
== pod-network
|
|
|
|
Manage Pod networks in the cluster.
|
|
|
|
.Example: Isolate project1 and project2 from other non-global projects
|
|
[source,terminal]
|
|
----
|
|
$ oc adm pod-network isolate-projects project1 project2
|
|
----
|
|
|
|
== policy
|
|
|
|
Manage roles and policies on the cluster.
|
|
|
|
.Example: Add the `edit` role to `user1` for all projects
|
|
[source,terminal]
|
|
----
|
|
$ oc adm policy add-cluster-role-to-user edit user1
|
|
----
|
|
|
|
.Example: Add the `privileged` security context constraint to a service account
|
|
[source,terminal]
|
|
----
|
|
$ oc adm policy add-scc-to-user privileged -z myserviceaccount
|
|
----
|