eriknelson

The push refers to a repository [registry-access-default.192.168.42.180.nip.io:443/openshift/my-apb02]
26bb2141e8c4: Preparing
2607b7fea482: Preparing
30d5462c686c: Preparing
ee36ec21785d: Preparing
40bdc0d41db4: Preparing
db7d691740b2: Preparing
b362758f4793: Preparing
db7d691740b2: Waiting
b362758f4793: Waiting

eriknelson

-- Starting profile 'minishift'
-- Checking if requested hypervisor 'kvm' is supported on this platform ... OK
-- Checking if KVM driver is installed ... 
   Driver is available at /usr/bin/docker-machine-driver-kvm ... 
   Checking driver binary is executable ... OK
-- Checking if Libvirt is installed ... OK
-- Checking if Libvirt default network is present ... OK
-- Checking if Libvirt default network is active ... OK
-- Checking the ISO URL ... OK
-- Starting local OpenShift cluster using 'kvm' hypervisor ...

eriknelson

handler/io.go:54:	// TODO: ke.StatusError import is not working, compiler thinks ke.StatusError is undefined...
clients/etcd.go:110:	// TODO: Config validation
clients/etcd.go:149:	// TODO: Determine if transport needs optimization
clients/zz_generated.deepcopy.go:3:// TODO: We need to remove this file by using the openshift api client.
handler/handler.go:62:// TODO: implement asynchronous operations
handler/handler.go:75:		// TODO: determine what to do with the Principal. We don't really have a
handler/handler.go:177:	// TODO: Reintroduce router restriction based on API version when settled upstream
handler/handler.go:234:	// TODO: typically the methods on the broker return a response this
broker/types.go:240:// TODO: What belongs on this thing?
broker/broker.go:85:	// TODO: consider returning a struct + error

eriknelson

oc create -n ansible-service-broker -f https://raw.githubusercontent.com/eriknelson/ansible-playbook-bundle/644cd7cb5faa74dfd7cf482ef0fda7523a676f93/templates/openshift-permissions.template.yaml

eriknelson

Keybase proof

I hereby claim:

• I am eriknelson on github.
• I am eriknelson (https://keybase.io/eriknelson) on keybase.
• I have a public key whose fingerprint is 14AC 5748 E887 6F45 7E32 4DC2 011D 03BF 49E2 89DE

To claim this, I am signing this object:

eriknelson

Proposal: Controlling access to Services and Plans

Abstract

Proposes changes to service-catalog to facilitate controlling access to certain services and plans.

Motivation

Not all services and plans should be available to all users. The existing cluster-scoped resources for brokers, services, and plans are not sufficient to implement access control to ensure that users have access only to the service and plans that they should.

eriknelson

Proposal: Controlling access to Services and Plans

Abstract

Proposes changes to service-catalog to facilitate controlling access to certain services and plans.

Motivation

Not all services and plans should be available to all users. The existing cluster-scoped resources for brokers, services, and plans are not sufficient to implement access control to ensure that users have access only to the service and plans that they should.

eriknelson

Aliases:
map[string]string{}
Override:
map[string]interface {}{"v":"10"}
PFlags:
map[string]viper.FlagValue{"nfs-share":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a65a0)}, "nfs-shares-root":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6640)}, "bootstrapper":viper.pflagValue{flag:(*pflag.Flag)(0xc4202e92c0)}, "container-runtime":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6c80)}, "docker-opt":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6780)}, "xhyve-disk-driver":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6500)}, "kubernetes-version":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6be0)}, "apiserver-name":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6820)}, "dns-domain":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6a00)}, "host-only-cidr":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6320)}, "iso-url":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6000)}, "mount-string":viper.pflagValue{flag:(*pflag.Flag)(0xc4202e9ea0)}, "registry-mirror":viper.pflagValue{flag:(*pflag.Flag)(0xc4202a6b40)}, "apiserver-ips":viper.pflagValu

eriknelson

I0426 02:57:57.504761       1 controller_servicebroker.go:284] NSKD: list opts: &{TypeMeta:{Kind: APIVersion:} ListMeta:{SelfLink:/apis/servicecatalog.k8s.io/v1beta1/namespaces/ansible-service-broker/serviceplans ResourceVersion:3 Continue:} Items:[]}
I0426 02:57:57.504867       1 controller_servicebroker.go:285] NSKD: no list opts: &{TypeMeta:{Kind: APIVersion:} ListMeta:{SelfLink:/apis/servicecatalog.k8s.io/v1beta1/namespaces/ansible-service-broker/serviceplans ResourceVersion:3 Continue:} Items:[]}
I0426 02:58:07.203152       1 controller_servicebroker.go:284] NSKD: list opts: &{TypeMeta:{Kind: APIVersion:} ListMeta:{SelfLink:/apis/servicecatalog.k8s.io/v1beta1/namespaces/ansible-service-broker/serviceplans ResourceVersion:53 Continue:} Items:[]}
I0426 02:58:07.203238       1 controller_servicebroker.go:285] NSKD: no list opts: &{TypeMeta:{Kind: APIVersion:} ListMeta:{SelfLink:/apis/servicecatalog.k8s.io/v1beta1/namespaces/ansible-service-broker/serviceplans ResourceVersion:53 Continue:} Items:[]}
I0426 02

eriknelson

{
  "services": [
    {
      "name": "dh-pyzip-demo-apb",
      "id": "0e991006d21029e47abe71acc255e807",
      "description": "Python Zip Demo APB Implementation",
      "bindable": false,
      "metadata": {
        "dependencies": [
          "docker.io/ansibleplaybookbundle/py-zip-demo:latest"