Bug 1326273

Summary: Couldn't add
Product: OpenShift Container Platform Reporter: Yadan Pei <yapei>
Component: apiserver-authAssignee: Ravi Sankar <rpenta>
Status: CLOSED INSUFFICIENT_DATA QA Contact: weiwei jiang <wjiang>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aos-bugs, wsun
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-12 10:09:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Yadan Pei 2016-04-12 10:08:32 UTC
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Create a group and add user 'user1' to it
$ oadm groups new test-group 
$ oadm groups add-users test-group user1
2. Add cluster role dedicated-cluster-admin to group 'test-group' using scripts, printing debug info
$ python apply-dedicated-roles.py -c dedicated-cluster-admin.json -p dedicated-project-admin.json -g test-group -s excluded-project -v
3. Login with user1, could list all project except for 'excluded-project'
4. Normal user create a new project  'normal-prj1'
$ oc new-project normal-prj1
5. Login with user1, could see newly created project 'normal-prj1', also could see following message printed from scripts
Adding role dedicated-project-admin to groups test-group in project normal-prj1
6. Normal user delete project 'normal-prj1'
7. Login with user1, project 'normal-prj1' is removed from project list, could see following message printed from scripts 
Removing role dedicated-project-admin from groups test-group in project normal-prj1 ... 
OK
Failed to remove role dedicated-project-admin from groups test-group in project normal-prj1: error: unable to locate RoleBinding for /dedicated-project-admin
8. Normal user re-create a project using the same name "normal-prj1"
9. Login with user1 again, couldn't see project "normal-prj1"

Actual results:
9. Didn't add role dedicated-project-admin to groups test-group in project "normal-prj1"

Expected results:
9. Should add role dedicated-project-admin to groups test-group in project "normal-prj1" successfully

Additional info: