This is a cache of https://docs.openshift.com/aro/3/getting_started/dedicated_administrators.html. It is a snapshot of the page at 2024-11-25T21:00:33.138+0000.
Administering a Cluster | Getting Started | Azure Red Hat OpenShift 3
    OpenShift docs are moving and will soon only be available at docs.redhat.com, the home of all Red Hat product documentation. Explore the new docs experience today.
  1. Documentation
×

Administering an Azure Red Hat OpenShift Cluster

Important

Azure Red Hat OpenShift 3.11 will be retired 30 June 2022. Support for creation of new Azure Red Hat OpenShift 3.11 clusters continues through 30 November 2020. Following retirement, remaining Azure Red Hat OpenShift 3.11 clusters will be shut down to prevent security vulnerabilities.

Follow this guide to create an Azure Red Hat OpenShift 4 cluster. If you have specific questions, please contact us

Overview

As an administrator of an Azure Red Hat OpenShift cluster, your account has additional permissions and access to all user-created projects in your organization’s cluster. While logged in to an account with this role, the basic developer cli (the oc command) allows you increased visibility and management capabilities over objects across projects.

While your account does have these increased permissions, the actual cluster maintenance and host configuration is performed by the Azure cluster administrator.

Azure Red Hat OpenShift administrators have the following additional permissions:

  • create/get/watch/list/update/patch/delete on LimitRange and ResourceQuota objects in all customer projects

  • create/get/watch/list/update/patch/delete on ClusterServiceBroker objects

  • “admin” ClusterRole in all customer projects

Downloading the cli

The oc cli used for both normal developer operations and administrator operations is available for download from the Command Line Tools page in the web console. See Get Started with the cli for more detailed installation steps.

Logging In and Verifying Permissions

You can log in as an Azure Red Hat OpenShift cluster administration via the web console or cli, just as you would if you were an application developer.

When you log in to the web console, all user-created projects across the cluster are visible from the main Projects page.

Use the standard oc login command to log in with the cli:

$ oc login <your_instance_url>

All projects are visible using:

$ oc get projects

Creating Service Accounts

You can create a service account to be able to run applications like Jenkins that make calls back to Azure Red Hat OpenShift.

See the Developer Guide for basic service account management tasks, which as a cluster administrator you can perform in any user-created project, and see Configuring Service Accounts for more advanced, cluster-wide settings.

What’s Next?

Further explore the Cluster Administration guide for more reference information on what’s possible with your role and what other cluster settings can be configured for you by the OpenShift Operations Team.