Bug 1446984

Summary: [dedicated] dedicated-cluster-admin needs to have an ability to edit templates and imagestreams in openshift namespace
Product: OpenShift Online Reporter: Kenjiro Nakayama <knakayam>
Component: RFEAssignee: Abhishek Gupta <abhgupta>
Status: CLOSED WONTFIX QA Contact: yasun
Severity: high Docs Contact:
Priority: high    
Version: 3.xCC: agrimm, anli, aos-bugs, bleanhar, gmontero, jeder, jeremy.davis, jokerman, mmccomas, myllynen, scuppett, sspeiche, twiest, yasun
Target Milestone: ---Keywords: NeedsTestCase, OpsBlocker
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-10-08 03:34:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1303130    

Description Kenjiro Nakayama 2017-05-01 04:12:14 UTC
Description of problem:
---
- The customer (dedicated users) cannot edit/replace default template/imagestreams in openshift namespace.
- For example, actual request is that the customer wanted to replace the pre-installed Jenkins image and python in the templates/imagestreams.
- It is possible to create new imagestream/templates in each namespace, but it makes webconsole messy.

Version-Release number of selected component (if applicable):
- OpenShift Dedicated

Steps to Reproduce:
---
1. oc edit template 

Actual results:
---
  $ oc edit imagestream -n openshift python
  error: imagestreams "python" could not be patched: User "dedicated-cluster-admin" cannot "patch" "imagestreams" with name "python" in project "openshift"
  You can run `oc replace -f /tmp/oc-edit-lmac3.yaml` to try this update again.

Expected results:
---
  $ oc edit imagestream -n openshift python
  $ oc edit template -n openshift jenkins

and edit/create/remove imagestream/templates works fine.

Comment 5 Steve Speicher 2017-05-10 20:40:42 UTC
We are tracking this as an enhancement request. We have some pieces of work to enable. The model we are looking at is where a customer would opt-out of having OpenShift Operations manage the install and update of the image-streams and templates. Then the customer would run the script themselves and update as needed. As we wouldn't have a good way to track the changes and apply updates. We'd provide documentation and tools to assist with that.

Comment 7 Paul Weil 2017-05-15 16:25:11 UTC
*** Bug 1385862 has been marked as a duplicate of this bug. ***

Comment 9 Bernie Hoefer 2017-06-12 12:31:33 UTC
Requesting update for customer, please.

Comment 12 Brenton Leanhardt 2017-08-24 17:48:00 UTC
*** Bug 1429366 has been marked as a duplicate of this bug. ***