Skip to content

Commit 0c0b915

Browse files
authored
Merge pull request #90378 from ShawnJackson/cluster-administration
edit pass: cluster-administration
2 parents 00bdd3f + bbcb4ca commit 0c0b915

File tree

2 files changed

+20
-19
lines changed

2 files changed

+20
-19
lines changed
Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,38 +1,40 @@
11
---
22
title: Azure Red Hat OpenShift cluster administrator role | Microsoft Docs
3-
description: Azure Red Hat OpenShift cluster administrator role assignment and usage
3+
description: Assignment and usage of the Azure Red Hat OpenShift cluster administrator role
44
services: container-service
55
author: mjudeikis
66
ms.author: b-majude
77
ms.author: jzim
88
ms.service: container-service
99
ms.topic: article
1010
ms.date: 09/25/2019
11-
#Customer intent: As a developer, I need to understand how to administer and Azure Red Hat cluster using administrative role
11+
#Customer intent: As a developer, I need to understand how to administer an Azure Red Hat cluster by using the administrative role
1212
---
1313

1414
# Azure Red Hat OpenShift customer administrator role
1515

16-
As an ARO (Azure Red Hat OpenShift) cluster administrator of an OpenShift cluster, your account has increased permissions and access to all user-created projects.
16+
You're the cluster administrator of an Azure Red Hat OpenShift cluster. Your account has increased permissions and access to all user-created projects.
1717

18-
When your account has the osa-customer-admins authorization role bound to it, it can automatically manage a project.
18+
When your account has the osa-customer-admin authorization role bound to it, it can automatically manage a project.
1919

2020
> [!Note]
21-
> osa-customer-admin clusterrole is not the same as cluster-admin clusterrole
21+
> The osa-customer-admin cluster role is not the same as the cluster-admin cluster role.
2222
2323

2424
For example, you can execute actions associated with a set of verbs (`create`) to operate on a set of resource names (`templates`). To view the details of these roles and their sets of verbs and resources, run the following command:
2525

2626
`$ oc describe clusterrole/osa-customer-admin`
2727

28-
The verb names do not necessarily all map directly to oc commands, but rather equate more generally to the types of CLI operations you can perform. For example, having the `list` verb means that you can display a list of all objects of a given resource name (`oc get`), while the `get` verb means that you can display the details of a specific object if you know its name (`oc describe`).
28+
The verb names don't necessarily all map directly to `oc` commands. They equate more generally to the types of CLI operations that you can perform.
2929

30-
## How to configure customer administrator role
30+
For example, having the `list` verb means that you can display a list of all objects of a resource name (`oc get`). The `get` verb means that you can display the details of a specific object if you know its name (`oc describe`).
3131

32-
Customer administrator role can be configured only during cluster creation by providing flag `--customer-admin-group-id`. How to configure Azure Active Directory and Administrators group follow how to guide: [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md)
32+
## Configure the customer administrator role
33+
34+
You can configure the customer administrator role only during cluster creation by providing the flag `--customer-admin-group-id`. To learn how to configure Azure Active Directory and the Administrators group, see [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md).
3335

3436
## Next steps
3537

36-
How to configure osa-customer-admin role:
38+
Configure the osa-customer-admin role:
3739
> [!div class="nextstepaction"]
3840
> [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md)

articles/openshift/cluster-administration-security-context-constraints.md

Lines changed: 9 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Managing security context constraints in Azure Red Hat OpenShift | Microsoft Docs
3-
description: Azure Red Hat OpenShift cluster administrator managing security context constraints
2+
title: Manage security context constraints in Azure Red Hat OpenShift | Microsoft Docs
3+
description: Security context constraints for Azure Red Hat OpenShift cluster administrators
44
services: container-service
55
author: troy0820
66
ms.author: b-trconn
@@ -10,13 +10,13 @@ ms.topic: article
1010
ms.date: 09/25/2019
1111
#Customer intent: As a developer, I need to understand how to manage security context constraints.
1212
---
13-
# Overview
13+
# Manage security context constraints in Azure Red Hat OpenShift
1414

15-
Security context constraints allow administrators to control permissions for pods. To learn more about this API type, see the [security context constraints](https://https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html) (SCCs) architecture documentation. You can manage SCCs in your instance as normal API objects using the CLI.
15+
Security context constraints (SCCs) allow cluster administrators to control permissions for pods. To learn more about this API type, see the [architecture documentation for SCCs](https://https://docs.openshift.com/container-platform/3.11/architecture/additional_concepts/authorization.html). You can manage SCCs in your instance as normal API objects by using the CLI.
1616

17-
## Listing security context constraints
17+
## List security context constraints
1818

19-
To get a current list of SCCs
19+
To get a current list of SCCs, use this command:
2020

2121
```bash
2222
$ oc get scc
@@ -31,9 +31,9 @@ privileged true [*] RunAsAny RunAsAny RunAsAny
3131
restricted false [] MustRunAs MustRunAsRange MustRunAs RunAsAny <none> false [configMap downwardAPI emptyDir persistentVolumeClaim secret]
3232
```
3333

34-
## Examining a security context constraints object
34+
## Examine an object for security context constraints
3535

36-
To examine a particular SCC, use `oc get`, `oc describe`, or `oc edit`. For example, to examine the **restricted** SCC:
36+
To examine a particular SCC, use `oc get`, `oc describe`, or `oc edit`. For example, to examine the **restricted** SCC, use this command:
3737
```bash
3838
$ oc describe scc restricted
3939
Name: restricted
@@ -68,6 +68,5 @@ Settings:
6868
Ranges: <none>
6969
```
7070
## Next steps
71-
How to configure osa-customer-admin role:
7271
> [!div class="nextstepaction"]
73-
> [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md)
72+
> [Create an Azure Red Hat OpenShift cluster](tutorial-create-cluster.md)

0 commit comments

Comments
 (0)