Authorizing a user to act as an IBM Software Hub instance administrator

If a user other than the cluster administrator will install IBM Software Hub, you must give a Red Hat® OpenShift® Container Platform user the required roles to install the IBM Software Hub software in the instance projects.

Installation phase
  • You are not here. Setting up a client workstation
  • You are not here. Setting up a cluster
  • You are not here. Collecting required information
  • You are not here. Preparing to run installs in a restricted network
  • You are not here. Preparing to run installs from a private container registry
  • You are not here. Preparing the cluster for IBM Software Hub
  • You are here icon. Preparing to install an instance of IBM Software Hub
  • You are not here. Installing an instance of IBM Software Hub
  • You are not here. Setting up the control plane
  • You are not here. Installing solutions and services
Who needs to complete this task?

Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?
This task is required in some situations.
  • Skip this task if the cluster administrator will install the IBM Software Hub software in the instance projects.
  • Complete this task only if a user other than the cluster administrator will install IBM Software Hub.

    Repeat as needed If you plan to install multiple instances of IBM Software Hub, you must repeat this task for each instance that you plan to install.

About this task

You have two options for giving a user the required roles to install the IBM Software Hub software in the instance projects:

  • You can give the user the admin role on the projects associated with the instance and the cpd-instance-admin-apply-olm role on the operators project associated with the instance.

    This option is recommended for most environments.

  • You can run the show-minimum-rbac command to give a user the minimum role-based access control (RBAC) to install an instance of IBM Software Hub.

    Use this option only if you are not willing to give users the admin role and the cpd-instance-admin-apply-olm role on projects.

    Important: This method requires substantial planning and maintenance.
    • You must run this command based on the services that you plan to install in an instance.
    • You must run this command based on the version of IBM Software Hub that you are installing.
    • When you want to upgrade an instance, you must re-run the command based on the version that you want to upgrade to.

Procedure

Complete the appropriate task to authorize a user to act as an IBM Software Hub instance administrator: