Reauthorizing a user with the admin role on the projects (Upgrading from Version 5.3 to Version 5.4)

If you gave a user the admin role on the projects associated with an instance of IBM® Software Hub, you must give the user the ${PROJECT_CPD_INST_OPERATORS}-cpd-instance-admin-cluster-role cluster role, which enables the instance administrator to install operators.

In addition, you must give the user the admin role on the project for the Backup Restore Orchestration service.

Upgrade phase
  • You are not here. Updating your client workstation
  • You are not here. Collecting required information
  • You are not here. Preparing to run an upgrade in a restricted network
  • You are not here. Preparing to run an upgrade from a private container registry
  • You are not here. Upgrading prerequisite software
  • You are not here. Upgrading shared cluster components
  • You are here icon. Preparing to upgrade an instance
  • You are not here. Upgrading an instance
  • You are not here. Setting up IBM Software Hub
Who needs to complete this task?

Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?

If you gave a user the admin role on the projects associated with this instance, you must complete this task to ensure that the user has sufficient privileges to upgrade the operators associated with the instance.

Repeat as needed If you have multiple instances of IBM Software Hub, you must repeat this task for each instance of IBM Software Hub that you plan to upgrade.

Procedure

  1. Log in to Red Hat® OpenShift® Container Platform as a user with sufficient permissions to complete the task. 
    ${OC_LOGIN}
  2. Set the INSTANCE_ADMIN environment variable to the username of the Red Hat OpenShift Container Platform user that you want to give instance administration privileges to. 
    export INSTANCE_ADMIN=<user>
  3. Assign the user the admin role in the Backup Restore Orchestration service project: 
    oc adm policy add-role-to-user admin ${INSTANCE_ADMIN} \
--namespace=${PROJECT_CPD_INST_BR_SVC} \
--rolebinding-name="cpd-instance-admin-rbac"
  4. Run the show-minimum-rbac command to generate the ${PROJECT_CPD_INST_OPERATORS}-cpd-instance-admin-cluster-role.${VERSION}.yaml file: 
    cpd-cli manage show-minimum-rbac \
--components=${COMPONENTS} \
--release=${VERSION} \
--patch_id=${PATCH_ID} \
--use_ns_admin=true \
--role_name=${PROJECT_CPD_INST_OPERATORS}
  5. Change to the work directory.
  6. Create the ${PROJECT_CPD_INST_OPERATORS}-cpd-instance-admin-cluster-role cluster role: 
    oc apply \
-f ${PROJECT_CPD_INST_OPERATORS}-cpd-instance-admin-cluster-role.${VERSION}.yaml

What to do next

Now that you've reauthorized the instance administrator, you're ready to complete Applying your entitlements to monitor and report use against license terms (Upgrading from Version 5.3 to Version 5.4).