Bug 1446981

Summary: [dedicated] dedicated-cluster-admin needs to have an ability to view clusterresourcequotas
Product: OpenShift Online Reporter: Kenjiro Nakayama <knakayam>
Component: Accounts and BillingAssignee: Abhishek Gupta <abhgupta>
Status: CLOSED CURRENTRELEASE QA Contact: Bing Li <bingli>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.xCC: abhgupta, aos-bugs, bleanhar, chuyu, dgoodwin, jokerman, mmccomas, yasun, yufchang
Target Milestone: ---   
Target Release: 3.x   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-11-09 18:52:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kenjiro Nakayama 2017-05-01 03:51:23 UTC 
Description of problem:
---
- Although Red Hat configured clusterresourcequotas for the dedicated cluster, the customer (dedicated users) cannot see the quota by themselves. That's inconvenient and as an admin users want to check current quota and consumed resources.

Version-Release number of selected component (if applicable):
- OpenShift Dedicated

Steps to Reproduce:
---
1. Run "oc get clusterresourcequota"

Actual results:
---
  $oc describe clusterresourcequota persistent-volume 
  Error from server: User "<USER_HAS_DEDICATED_CLUSTER_ADMIN_ROLE>" cannot get clusterresourcequotas at the cluster scope

Expected results:
---
  $oc describe clusterresourcequota persistent-volume shows the quota.
Comment 3 Brenton Leanhardt 2017-05-02 19:29:26 UTC 
I'm proposing we simply track this as a bug.  Abhishek has already merged the patch.  I'm moving this to MODIFIED.  Abhishek, can you have this deployed somewhere QE can test and the move it ON_QA?
Comment 4 Brenton Leanhardt 2017-05-02 19:33:15 UTC 
Online didn't have an RFE component so I picked what I thought was at least somewhat reasonable.
Comment 6 Bing Li 2017-07-11 02:31:30 UTC 
Verified in ded-stage-aws: clusterrole "dedicated-cluster-admin" has the ability to view clusterresourcequotas:

$oc get clusterrole dedicated-cluster-admin -o json
......
        {
            "apiGroups": [
                ""
            ],
            "attributeRestrictions": null,
            "resources": [
                "clusterresourcequotas",
                "events",
                "minions",
                "nodes",
                "persistentvolumes",
                "securitycontextconstraints"
            ],
            "verbs": [
                "get",
                "list",
                "watch"
            ]
        },
......

Version:
OpenShift Master:  v3.5.5.26
Kubernetes Master: v1.5.2+43a9be4