AMO 🐶⛺🌳

@rwos, I really like the PR and this is just a tradeoff between old behavior and new security. The problem is that users who use ECR/GCR have the registry credentials...

_From @kingdonb on August 24, 2017 16:49_ Here's what I've done: ``` minishift start ... oc login -u system:admin kubectl -n myproject create sa tiller kubectl create clusterrolebinding tiller --clusterrole...

_From @kingdonb on August 24, 2017 17:30_ I get the same results with https://docs.bitnami.com/kubernetes/how-to/configure-rbac-in-your-kubernetes-cluster/ ``` $ helm install -n deis --namespace myproject workflow/ Error: release deis failed: User "system:serviceaccount:kube-system:tiller" cannot...

_From @bacongobbler on August 24, 2017 17:32_ Did you grant tiller RBAC permissions to create objects in the "myproject" namespace? That gist you posted earlier is only relevant if tiller...

_From @bacongobbler on August 24, 2017 17:45_ https://github.com/openshift/origin/pull/8242

_From @kingdonb on August 24, 2017 17:56_ Oh! The OpenShift devs helped me out, two things I'm doing wrong... 1. When a tutorial says to use `-z` in oc policy,...

_From @bacongobbler on August 24, 2017 18:1_ Did you make sure to install Workflow with RBAC permissions? You'll need to add `--set global.use_rbac=true` in your `helm install` invocation to install...

_From @bacongobbler on August 24, 2017 18:2_ Not sure about the other issues. We don't officially support Workflow on Openshift, but please continue to post here so others can learn.

_From @kingdonb on August 24, 2017 18:2_ You have been so helpful. Thank you! I did not do that.

_From @kingdonb on August 24, 2017 18:7_ This big "MISSING" at the bottom looks kind of ominous... those are my RBAC roles, and I'm guessing that Missing means they're using...