*Why*
So We want to protect the UPS can use behind the oauth-proxy, on Openshift. For that we need to:
* add the oauth-proxy config
* add serviceaccount as an oauth client for OpenShift . /UPS
*How*
Similar to our metrics-app we need to add the config for the oauth proxy, like:
https://github.com/aerogearcatalog/metrics-apb/blob/master/roles/provision-metrics-apb/tasks/provision-prometheus.yml#L37-L52
See how the serviceaccount is defined for Jenkins as an example https://github.com/openshift/origin/blob/master/examples/jenkins/jenkins-persistent-template.json#L186-L195
The serviceaccount can be added to the APB provision task https://github.com/aerogearcatalog/unifiedpush-apb/blob/master/roles/provision-unifiedpush-apb/tasks/main.yml
|
|
