2.3. Granting view permissions


Configure the necessary permissions for the application to access the required cluster resources.

OpenShift Container Platform automatically creates several service accounts in every project. The default service account takes responsibility for running the pods. OpenShift Container Platform uses and injects this service account into every pod that launches.

By default, the default service account has limited permissions to interact with the OpenShift API.

As a requirement of the application, you must assign the view role to the default service account to allow it to communicate with the OpenShift API to learn about pods, services, and resources within the project.

Prerequisites

  • You have cluster-admin or project-level admin privileges.

Procedure

  1. Navigate to User Management RoleBindings.
  2. Click Create binding.
  3. In the Name field, enter sa-user-account.
  4. In the Namespace field, search for and select user-getting-started.

    重要

    If you are using a different project, select the name of your project.

  5. In the Role name field, search for and select view.
  6. Under Subject, select ServiceAccount.
  7. In the Subject namespace field, search for and select user-getting-started.

    重要

    If you are using a different project, select the name of your project.

  8. In the Subject name field, enter default.
  9. Click Create.
Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

關於紅帽

我们提供强化的解决方案,使企业能够更轻松地跨平台和环境(从核心数据中心到网络边缘)工作。

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情,请参阅红帽博客.

关于红帽文档

Legal Notice

Theme

© 2026 Red Hat
返回顶部