How to disable reconciliation for cluster-roles

Solution Verified - Updated -

Issue

  • In Openshift Container platform 3.7, a clusterrolebinding definition has been added with one annotation i.e openshift.io/reconcile-protect. The parameter of annotation needs to be changed to make the policy configuration persist after restarting systemd-units.
  • On restarting atomic-openshift-master-api and atomic-openshift-master-controllers daemon services the configured roles are always reconciled to the default policy.

Environment

  • Red Hat Openshift Container Platform +3.7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content