Bug 1439066

Summary: [free][free-int] Prompt error: rolebindings "jenkins_edit" is forbidden when create jenkins server via "jenkins-persistent" template
Product: OpenShift Online Reporter: Dongbo Yan <dyan>
Component: TemplatesAssignee: Abhishek Gupta <abhgupta>
Status: CLOSED CURRENTRELEASE QA Contact: XiuJuan Wang <xiuwang>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.xCC: aos-bugs, bingli, bparees, cewong, jokerman, mifiedle, mmccomas, wzheng, xiazhao
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-05-01 20:40:02 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1439065, 1439859    

Description Dongbo Yan 2017-04-05 07:15:13 UTC
Description of problem:
When create jenkins sever via "jenkins-persistent" template, will prompt error: rolebindings "jenkins_edit" is forbidden: rolebindings to ServiceAccount "jenkins" are not allowed in project "dyan1"

Version-Release number of selected component (if applicable):
openshift v3.5.5
kubernetes v1.5.2+43a9be4

How reproducible:
Always

Steps to Reproduce:
1.Create a project on free-int
2.Create a jenkins server
 $ oc new-app jenkins-persistent
3.

Actual results:
--> Deploying template "openshift/jenkins-persistent" to project dyan1

     Jenkins (Persistent)
     ---------
     Jenkins service, with persistent storage.
     
     NOTE: You must have persistent volumes available in your cluster to use this template.

     A Jenkins service has been created in your project.  Log into Jenkins with your OpenShift account.  The tutorial at https://github.com/openshift/origin/blob/master/examples/jenkins/README.md contains more information about using this template.


     * With parameters:
        * Jenkins Service Name=jenkins
        * Jenkins JNLP Service Name=jenkins-jnlp
        * Enable OAuth in Jenkins=true
        * Memory Limit=512Mi
        * Volume Capacity=1Gi
        * Jenkins ImageStream Namespace=openshift
        * Jenkins ImageStreamTag=jenkins:latest

--> Creating resources ...
    route "jenkins" created
    persistentvolumeclaim "jenkins" created
    deploymentconfig "jenkins" created
    serviceaccount "jenkins" created
    error: rolebindings "jenkins_edit" is forbidden: rolebindings to ServiceAccount "jenkins" are not allowed in project "dyan1"
    service "jenkins-jnlp" created
    service "jenkins" created
--> Failed

Expected results:
should succeed without error

Additional info:

Comment 2 Dongbo Yan 2017-04-07 07:40:54 UTC
Test on free-int
openshift v3.5.5.3
kubernetes v1.5.2+43a9be4

Actual result: succeed without error

$ oc new-app jenkins-persistent
--> Deploying template "openshift/jenkins-persistent" to project dyan7

     Jenkins (Persistent)
     ---------
     Jenkins service, with persistent storage.
     
     NOTE: You must have persistent volumes available in your cluster to use this template.

     A Jenkins service has been created in your project.  Log into Jenkins with your OpenShift account.  The tutorial at https://github.com/openshift/origin/blob/master/examples/jenkins/README.md contains more information about using this template.


     * With parameters:
        * Jenkins Service Name=jenkins
        * Jenkins JNLP Service Name=jenkins-jnlp
        * Enable OAuth in Jenkins=true
        * Memory Limit=512Mi
        * Volume Capacity=1Gi
        * Jenkins ImageStream Namespace=openshift
        * Jenkins ImageStreamTag=jenkins:latest

--> Creating resources ...
    route "jenkins" created
    persistentvolumeclaim "jenkins" created
    deploymentconfig "jenkins" created
    serviceaccount "jenkins" created
    rolebinding "jenkins_edit" created
    service "jenkins-jnlp" created
    service "jenkins" created
--> Success
    Run 'oc status' to view your app.