| ... | ... |
@@ -986,6 +986,56 @@ _oadm_create-api-client-config() |
| 986 | 986 |
must_have_one_noun=() |
| 987 | 987 |
} |
| 988 | 988 |
|
| 989 |
+_oadm_pod-network_join-projects() |
|
| 990 |
+{
|
|
| 991 |
+ last_command="oadm_pod-network_join-projects" |
|
| 992 |
+ commands=() |
|
| 993 |
+ |
|
| 994 |
+ flags=() |
|
| 995 |
+ two_word_flags=() |
|
| 996 |
+ flags_with_completion=() |
|
| 997 |
+ flags_completion=() |
|
| 998 |
+ |
|
| 999 |
+ flags+=("--selector=")
|
|
| 1000 |
+ flags+=("--to=")
|
|
| 1001 |
+ |
|
| 1002 |
+ must_have_one_flag=() |
|
| 1003 |
+ must_have_one_noun=() |
|
| 1004 |
+} |
|
| 1005 |
+ |
|
| 1006 |
+_oadm_pod-network_unisolate-projects() |
|
| 1007 |
+{
|
|
| 1008 |
+ last_command="oadm_pod-network_unisolate-projects" |
|
| 1009 |
+ commands=() |
|
| 1010 |
+ |
|
| 1011 |
+ flags=() |
|
| 1012 |
+ two_word_flags=() |
|
| 1013 |
+ flags_with_completion=() |
|
| 1014 |
+ flags_completion=() |
|
| 1015 |
+ |
|
| 1016 |
+ flags+=("--selector=")
|
|
| 1017 |
+ |
|
| 1018 |
+ must_have_one_flag=() |
|
| 1019 |
+ must_have_one_noun=() |
|
| 1020 |
+} |
|
| 1021 |
+ |
|
| 1022 |
+_oadm_pod-network() |
|
| 1023 |
+{
|
|
| 1024 |
+ last_command="oadm_pod-network" |
|
| 1025 |
+ commands=() |
|
| 1026 |
+ commands+=("join-projects")
|
|
| 1027 |
+ commands+=("unisolate-projects")
|
|
| 1028 |
+ |
|
| 1029 |
+ flags=() |
|
| 1030 |
+ two_word_flags=() |
|
| 1031 |
+ flags_with_completion=() |
|
| 1032 |
+ flags_completion=() |
|
| 1033 |
+ |
|
| 1034 |
+ |
|
| 1035 |
+ must_have_one_flag=() |
|
| 1036 |
+ must_have_one_noun=() |
|
| 1037 |
+} |
|
| 1038 |
+ |
|
| 989 | 1039 |
_oadm_create-bootstrap-project-template() |
| 990 | 1040 |
{
|
| 991 | 1041 |
last_command="oadm_create-bootstrap-project-template" |
| ... | ... |
@@ -1279,6 +1329,7 @@ _oadm() |
| 1279 | 1279 |
commands+=("config")
|
| 1280 | 1280 |
commands+=("create-kubeconfig")
|
| 1281 | 1281 |
commands+=("create-api-client-config")
|
| 1282 |
+ commands+=("pod-network")
|
|
| 1282 | 1283 |
commands+=("create-bootstrap-project-template")
|
| 1283 | 1284 |
commands+=("create-bootstrap-policy-file")
|
| 1284 | 1285 |
commands+=("create-login-template")
|
| ... | ... |
@@ -1416,6 +1416,56 @@ _openshift_admin_create-api-client-config() |
| 1416 | 1416 |
must_have_one_noun=() |
| 1417 | 1417 |
} |
| 1418 | 1418 |
|
| 1419 |
+_openshift_admin_pod-network_join-projects() |
|
| 1420 |
+{
|
|
| 1421 |
+ last_command="openshift_admin_pod-network_join-projects" |
|
| 1422 |
+ commands=() |
|
| 1423 |
+ |
|
| 1424 |
+ flags=() |
|
| 1425 |
+ two_word_flags=() |
|
| 1426 |
+ flags_with_completion=() |
|
| 1427 |
+ flags_completion=() |
|
| 1428 |
+ |
|
| 1429 |
+ flags+=("--selector=")
|
|
| 1430 |
+ flags+=("--to=")
|
|
| 1431 |
+ |
|
| 1432 |
+ must_have_one_flag=() |
|
| 1433 |
+ must_have_one_noun=() |
|
| 1434 |
+} |
|
| 1435 |
+ |
|
| 1436 |
+_openshift_admin_pod-network_unisolate-projects() |
|
| 1437 |
+{
|
|
| 1438 |
+ last_command="openshift_admin_pod-network_unisolate-projects" |
|
| 1439 |
+ commands=() |
|
| 1440 |
+ |
|
| 1441 |
+ flags=() |
|
| 1442 |
+ two_word_flags=() |
|
| 1443 |
+ flags_with_completion=() |
|
| 1444 |
+ flags_completion=() |
|
| 1445 |
+ |
|
| 1446 |
+ flags+=("--selector=")
|
|
| 1447 |
+ |
|
| 1448 |
+ must_have_one_flag=() |
|
| 1449 |
+ must_have_one_noun=() |
|
| 1450 |
+} |
|
| 1451 |
+ |
|
| 1452 |
+_openshift_admin_pod-network() |
|
| 1453 |
+{
|
|
| 1454 |
+ last_command="openshift_admin_pod-network" |
|
| 1455 |
+ commands=() |
|
| 1456 |
+ commands+=("join-projects")
|
|
| 1457 |
+ commands+=("unisolate-projects")
|
|
| 1458 |
+ |
|
| 1459 |
+ flags=() |
|
| 1460 |
+ two_word_flags=() |
|
| 1461 |
+ flags_with_completion=() |
|
| 1462 |
+ flags_completion=() |
|
| 1463 |
+ |
|
| 1464 |
+ |
|
| 1465 |
+ must_have_one_flag=() |
|
| 1466 |
+ must_have_one_noun=() |
|
| 1467 |
+} |
|
| 1468 |
+ |
|
| 1419 | 1469 |
_openshift_admin_create-bootstrap-project-template() |
| 1420 | 1470 |
{
|
| 1421 | 1471 |
last_command="openshift_admin_create-bootstrap-project-template" |
| ... | ... |
@@ -1709,6 +1759,7 @@ _openshift_admin() |
| 1709 | 1709 |
commands+=("config")
|
| 1710 | 1710 |
commands+=("create-kubeconfig")
|
| 1711 | 1711 |
commands+=("create-api-client-config")
|
| 1712 |
+ commands+=("pod-network")
|
|
| 1712 | 1713 |
commands+=("create-bootstrap-project-template")
|
| 1713 | 1714 |
commands+=("create-bootstrap-policy-file")
|
| 1714 | 1715 |
commands+=("create-login-template")
|
| ... | ... |
@@ -201,6 +201,38 @@ Manage nodes - list pods, evacuate, or mark ready |
| 201 | 201 |
==== |
| 202 | 202 |
|
| 203 | 203 |
|
| 204 |
+== oadm pod-network join-projects |
|
| 205 |
+Join project network |
|
| 206 |
+ |
|
| 207 |
+==== |
|
| 208 |
+ |
|
| 209 |
+[options="nowrap"] |
|
| 210 |
+---- |
|
| 211 |
+ // Allow project p2 to use project p1 network |
|
| 212 |
+ $ openshift admin pod-network join-projects --to=<p1> <p2> |
|
| 213 |
+ |
|
| 214 |
+ // Allow all projects with label name=top-secret to use project p1 network |
|
| 215 |
+ $ openshift admin pod-network join-projects --to=<p1> --selector='name=top-secret' |
|
| 216 |
+---- |
|
| 217 |
+==== |
|
| 218 |
+ |
|
| 219 |
+ |
|
| 220 |
+== oadm pod-network unisolate-projects |
|
| 221 |
+UnIsolate project network |
|
| 222 |
+ |
|
| 223 |
+==== |
|
| 224 |
+ |
|
| 225 |
+[options="nowrap"] |
|
| 226 |
+---- |
|
| 227 |
+ // Allow project p1 to access all pods in the cluster and vice versa |
|
| 228 |
+ $ openshift admin pod-network unisolate-projects <p1> |
|
| 229 |
+ |
|
| 230 |
+ // Allow all projects with label name=share to access all pods in the cluster and vice versa |
|
| 231 |
+ $ openshift admin pod-network unisolate-projects --selector='name=share' |
|
| 232 |
+---- |
|
| 233 |
+==== |
|
| 234 |
+ |
|
| 235 |
+ |
|
| 204 | 236 |
== oadm policy reconcile-cluster-role-bindings |
| 205 | 237 |
Replace cluster role bindings to match the recommended bootstrap policy |
| 206 | 238 |
|