Skip to content

Commit 201824c

Browse files
committed
Modified the service account setup directions to specify the target namespace.
1 parent 777e8de commit 201824c

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

docs/book/src/topics/rosa/creating-a-cluster.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ CAPA controller requires service account credentials to be able to provision ROS
1414
rosa whoami
1515
```
1616

17-
1. Create a new kubernetes secret with the service account credentials to be referenced later by `ROSAControlPlane`
17+
1. Create a new kubernetes secret with the service account credentials within the target namespace to be referenced later by `ROSAControlPlane`
1818
```shell
1919
kubectl create secret generic rosa-creds-secret \
2020
--from-literal=ocmClientID='....' \
@@ -28,14 +28,16 @@ CAPA controller requires service account credentials to be able to provision ROS
2828
--from-literal=ocmClientSecret='eyJhbGciOiJIUzI1NiIsI....' \
2929
--from-literal=ocmApiUrl='https://api.openshift.com'
3030
```
31-
31+
32+
If the secret is referenced in the `ROSAControlPlane`, CAPA will look for the secret ONLY in the target namespace.
33+
3234

3335
### Authentication using SSO offline token (DEPRECATED)
3436
The SSO offline token is being deprecated and it is recommended to use service account credentials instead, as described above.
3537

3638
1. Visit https://console.redhat.com/openshift/token to retrieve your SSO offline authentication token
3739

38-
1. Create a credentials secret within the target namespace with the token to be referenced later by `ROSAControlePlane`
40+
1. Create a credentials secret within the target namespace with the token to be referenced later by `ROSAControlPlane`
3941
```shell
4042
kubectl create secret generic rosa-creds-secret \
4143
--from-literal=ocmToken='eyJhbGciOiJIUzI1NiIsI....' \

0 commit comments

Comments
 (0)