Skip to content

Commit 36af49e

Browse files
committed
OCPBUGS-55069:updates RBAC for UDN
1 parent 9f8fd7c commit 36af49e

File tree

2 files changed

+9
-6
lines changed

2 files changed

+9
-6
lines changed

modules/nw-udn-cr.adoc

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,10 @@
88

99
The following procedure creates a `UserDefinedNetwork` CR that is namespace scoped. Based upon your use case, create your request by using either the `my-layer-two-udn.yaml` example for a `Layer2` topology type or the `my-layer-three-udn.yaml` example for a `Layer3` topology type.
1010

11-
//We won't have these pieces till GA in 4.18.
12-
//[NOTE]
13-
//====
14-
//If any cluster default networked pods exist before the user-defined network is created, any further pods created in this namespace will return an error message: `What_is_this`?
15-
//====
11+
.Perquisites
12+
13+
* You have logged in with `cluster-admin` privileges, or you have `view` and `edit` role-based access control (RBAC).
14+
1615
1716
.Procedure
1817

@@ -24,7 +23,7 @@ $ cat << EOF | oc apply -f -
2423
apiVersion: v1
2524
kind: Namespace
2625
metadata:
27-
name: <udn_namespace_name>
26+
name: <udn_namespace_name>
2827
labels:
2928
k8s.ovn.org/primary-user-defined-network: ""
3029
EOF

networking/multiple_networks/primary_networks/about-user-defined-networks.adoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,10 @@ include::modules/nw-udn-best-practices.adoc[leveloffset=+2]
5555
//How to implement the UDN API by using the CLI.
5656
include::modules/nw-udn-cr.adoc[leveloffset=+2]
5757

58+
[role="_additional-resources"]
59+
.Additional resources
60+
* xref:../../../authentication/using-rbac.adoc#authorization-overview_using-rbac[Default cluster roles]
61+
5862
//How to implement the UDN API by using the UI
5963
include::modules/nw-udn-cr-ui.adoc[leveloffset=+2]
6064

0 commit comments

Comments
 (0)