Bug 1325438

Summary: Disabling self provisioning sets off Diagnostics Warnings
Product: OpenShift Container Platform Reporter: Ryan Howe <rhowe>
Component: ocAssignee: Luke Meyer <lmeyer>
Status: CLOSED EOL QA Contact: Wei Sun <wsun>
Severity: low Docs Contact:
Priority: unspecified    
Version: 3.1.0CC: aos-bugs, jokerman, maszulik, mmccomas, nicholas_schuetz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-26 19:04:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Ryan Howe 2016-04-08 20:04:13 UTC
Description of problem:
- Disabling self provisioning sets off Diagnostics Warnings

Version-Release number of selected component (if applicable):
3.1.1.6

How reproducible:
100%

Steps to Reproduce:
1. Modify cluster role binding removing self-provision from authenticated group. 
2. Run diagnostics 

Actual results:
Warning 


Expected results:
Be able to ignore warning in future runs. 

Additional info:

WARN:  [CRBD1003 from diagnostic ClusterRoleBindings@openshift/origin/pkg/diagnostics/cluster/rolebindings.go:82]
       clusterrolebinding/self-provisioners is missing expected subjects.
       
       Use the `oadm policy reconcile-cluster-role-bindings` command to update the role binding to include expected subjects.

If we execute said instructions it does nothing. If we execute the following it gives back the ability of our users to self provision.

oadm policy reconcile-cluster-role-bindings --confirm --additive-only=false