AMO 🐶⛺🌳

_From @kingdonb on August 24, 2017 18:37_ ... It is true, the OpenShift 3.4 security model had not yet started to merge with K8S RBAC because K8S was not fully...

_From @kingdonb on August 24, 2017 19:0_ Almost... there is a bridge for roles (OpenShift has its own role kinds that predate Kubernetes formal implementation of RBAC), but the connector...

_From @kingdonb on August 25, 2017 12:54_ these roles/bindings: https://gist.github.com/enj/078cc916365a7c3db6da581ea4485bd6 and some combination of these scc settings: ``` # (for tiller in kube-system namespace, cluster-admin because daemonsets) oc policy add-role-to-user...

_From @kingdonb on August 25, 2017 13:31_ Hm. Today on a clean minishift, it works! I believe with no more information than I already had posted here. Waiting for Builder...

_From @kingdonb on August 29, 2017 1:58_ I have now deployed Workflow on OpenShift Origin as well as Minishift, and tackled some of the additional challenges that entails. I think...

_From @kingdonb on August 29, 2017 2:22_ I packed the changes up into one repo so they can be reviewed at-once, but https://github.com/kingdonb/openshift-deis/commits/openshift-deis-v2.17 I will unpack them into PRs on...

_From @kingdonb on September 16, 2017 17:44_ After a few weeks of upstream development, I went in to review this stuff and try porting it forward to the latest releases...

_From @kingdonb on September 16, 2017 20:4_ Yep. The key is to make sure you get the order right. I've got almost everything coming up now, and I'm closing in...

_From @kingdonb on September 16, 2017 20:10_ The result is now (running tally of unresolved errors looks like): #### Deis Controller deploy logs ``` system information: Django Version: 1.11.4 Python...

_From @kingdonb on September 16, 2017 21:10_ Rolling the stack back to Minishift v1.4.1 and Deis v2.17, I had much better results: ``` # the syntax for --memory has changed...