Bug 1258390
Summary: | Project admin can't run 'oc attach POD' successfully | ||
---|---|---|---|
Product: | OKD | Reporter: | Yadan Pei <yapei> |
Component: | Security | Assignee: | Jordan Liggitt <jliggitt> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Xiaoli Tian <xtian> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 3.x | CC: | aos-bugs, jialiu, lmeyer, mmccomas |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-11-23 21:18:47 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Yadan Pei
2015-08-31 09:30:11 UTC
Need to add "pods/attach" to policy. Might need to protect pods/attach the same way we protect pods/exec Need to update long running regular expression to include attach Also need changes from https://github.com/kubernetes/kubernetes/pull/13705 Project admin permission fixed in https://github.com/openshift/origin/pull/4587 Moving to ON_QA, spawned https://bugzilla.redhat.com/show_bug.cgi?id=1261548 for the `oc run --attach` bug Verified on devenv-fedora_2314, project admin & edit role could run oc attach successfully now. |