Bug 1496694
Summary: | cluster role need update to track current resources name of servicecatalog api group for v3.7 | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | weiwei jiang <wjiang> |
Component: | Service Broker | Assignee: | Matthew Staebler <mstaeble> |
Status: | CLOSED ERRATA | QA Contact: | weiwei jiang <wjiang> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 3.7.0 | CC: | aos-bugs, bleanhar, chezhang, ewolinet, jmatthew, jokerman, jpeeler, mmccomas, pmorie, sdodson, wmeng, xiuwang, xtian, xxia |
Target Milestone: | --- | ||
Target Release: | 3.7.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | No Doc Update | |
Doc Text: |
undefined
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2017-11-28 22:13:20 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
weiwei jiang
2017-09-28 07:21:58 UTC
The card will block all the service-catalog related testing for v3.7 since the resource name is changed. And for now we have to grant the related user/sa with cluster-admin as a workaround. Checked with openshift-ansible-3.7.0-0.174.0.git.0.01932ad.el7.noarch.rpm, and found that cluster admin and edit is still using the old name. # oc get clusterrole admin -o yaml |grep -A 20 -B 1 -i servicecatalog - apiGroups: - servicecatalog.k8s.io attributeRestrictions: null resources: - bindings - instances verbs: - create - delete - get - list - update - watch - apiGroups: - settings.k8s.io attributeRestrictions: null resources: - podpresets verbs: - create - delete - get # oc get clusterrole edit -o yaml |grep -A 20 -B 1 -i servicecatalog - apiGroups: - servicecatalog.k8s.io attributeRestrictions: null resources: - bindings - instances verbs: - create - delete - get - list - update - watch - apiGroups: - settings.k8s.io attributeRestrictions: null resources: - podpresets verbs: - create - delete - get TASK [openshift_service_catalog : Generate apply template for clusterrole/edit] *** Monday 23 October 2017 07:50:34 +0000 (0:00:00.546) 0:12:10.451 ******** changed: [host-xxxxxx] => {"changed": true, "checksum": "0e40a1cffb1db2144c98464a75ef5cfddaaedc5e", "dest": "/tmp/openshift-service-catalog-ansible-RKMkF5/edit_sc_patch.yml", "failed": false, "gid": 0, "group": "root", "md5sum": "a1841d2c062ff5a6da52b26e9ac1b025", "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 5629, "src": "/root/.ansible/tmp/ansible-tmp-1508745035.06-202443114384748/source", "state": "file", "uid": 0} TASK [openshift_service_catalog : Generate apply template for clusterrole/admin] *** Monday 23 October 2017 07:50:36 +0000 (0:00:00.514) 0:12:12.100 ******** changed: [host-xxxxxx] => {"changed": true, "checksum": "badd0104a447eb9e2903cce2bb1f006b3f944b64", "dest": "/tmp/openshift-service-catalog-ansible-RKMkF5/admin_sc_patch.yml", "failed": false, "gid": 0, "group": "root", "md5sum": "a1d407f963f44429e77fd614f2127133", "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 6949, "src": "/root/.ansible/tmp/ansible-tmp-1508745036.73-275476748680638/source", "state": "file", "uid": 0} Will give a try after https://bugzilla.redhat.com/show_bug.cgi?id=1496426 fixed. Verified and passed on Brew v3.7.0-0.189.0 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3188 |