You can log in as an {product-title} cluster administration via the web console or CLI, just as you would if you were an application developer.
When you log in to the web console, all user-created projects across the cluster are visible from the main Projects page.
Use the standard oc login command to log in with the CLI:
$ oc login <your_instance_url>
All projects are visible using:
$ oc get projects
When your account has the dedicated-admins-cluster cluster role bound to it,
you are automatically bound to the dedicated-admins-project for any new
projects that are created by users in the cluster.
To verify if your account has administrator privileges, run the following
command against a user-created project to view its default role bindings. If you
are a cluster administrator, you will see your account listed under subjects for
the dedicated-admins-project-0 and dedicated-admins-project-1 role bindings
for the project:
$ oc describe rolebinding.rbac -n <project_name> Name: admin Labels: <none> Annotations: <none> Role: Kind: ClusterRole Name: admin Subjects: Kind Name Namespace ---- ---- --------- User [email protected] (1) Name: dedicated-admins-project Labels: <none> Annotations: <none> Role: Kind: ClusterRole Name: dedicated-admins-project Subjects: Kind Name Namespace ---- ---- --------- User [email protected] (2) User [email protected] (2) ...
-
The
[email protected]user is a normal, project-scoped administrator for this project. -
The
[email protected]and[email protected]users are cluster administrators.
To view details on your increased permissions, and the sets of
verbs and resources associated with the dedicated-admins-cluster and
dedicated-admins-project roles, run the following:
$ oc describe clusterrole.rbac dedicated-admins-cluster $ oc describe clusterrole.rbac dedicated-admins-project