diff --git a/playbooks/groups/os-cluster.yml b/playbooks/groups/os-cluster.yml index 21e62477ea..b92c96b7ad 100644 --- a/playbooks/groups/os-cluster.yml +++ b/playbooks/groups/os-cluster.yml @@ -177,8 +177,9 @@ tasks: - name: Disallow users from provisioning - command: oadm policy remove-cluster-role-from-group self-provisioner system:authenticated system:authenticated:oauth + command: oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated system:authenticated:oauth changed_when: false + failed_when: 'unable to find target' not in command_result.stdout - name: Allow some users cluster admin command: oadm policy add-cluster-role-to-user cluster-admin {{item}} with_items: