Chapter 18. Impersonating the system:admin user

Procedure

1. From the Overview page in the OpenShift Container Platform console, click your user name and select Impersonate User.
2. In the Username field in the Impersonate dialog, enter the name of the user you want to impersonate.

3. Optional: In the Groups field, choose one or more groups that are associated with the user.

   The dialog displays a warning message explaining that impersonation applies the effective permissions of the specified user and any selected groups.

4. Click Impersonate to impersonate your selected user, groups, or both.

   Note

   Selecting one group uses the existing single-group impersonation behavior. Selecting no groups uses regular single-user impersonation.

Procedure

1. From the Overview page in the OpenShift Container Platform console, click User Management Users.
2. Open the menu for the user you want to impersonate and select Impersonate User.
3. Optional: To impersonate a group, click User Management Groups, click the menu for that group, and select Impersonate Group.

Procedure

1. On any page in the OpenShift Container Platform console, click Stop impersonating at the top of the page.
2. Alternatively, click your user name and select Stop impersonating.

Procedure

1. Create a YAML file named add-<cluster_role>-unauth.yaml and add the following content:

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    name: <cluster_role>access-unauthenticated
   roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: <cluster_role>
   subjects:
    - apiGroup: rbac.authorization.k8s.io
      kind: Group
      name: system:unauthenticated

2. Apply the configuration by running the following command:

   $ oc apply -f add-<cluster_role>.yaml