Bug 1802580
Summary: | project.spec.projectRequestMessage not displayed | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Olimp Bockowski <obockows> |
Component: | oc | Assignee: | Sally <somalley> |
Status: | CLOSED WONTFIX | QA Contact: | zhou ying <yinzhou> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 4.3.z | CC: | aos-bugs, jokerman, knarra, maszulik, mfojtik, slaznick |
Target Milestone: | --- | ||
Target Release: | 4.6.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | No Doc Update | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2020-08-20 20:20:53 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Olimp Bockowski
2020-02-13 12:56:37 UTC
This is not going to be addressed in 4.4, moving to 4.5. I see in the console, a user without the self-provisioner clusterrole no longer has the option/button to create projects, this part of this bz is verified/fixed. I've opened a PR to return the ProjectRequestMessage if it exists when user w/ no self-provisioner clusterrole runs: $ oc login $ oc project $ oc new-project This bug is actively being worked on. Confirmed with oc version : [root@dhcp-140-138 roottest]# oc version Client Version: 4.5.0-202005231517-44354e2 Kubernetes Version: v1.18.2 `oc edit project.config.openshift.io/cluster` specify the spec. projectRequestMessage oc get project.config.openshift.io/cluster -oyaml apiVersion: config.openshift.io/v1 kind: Project metadata: annotations: .... spec: projectRequestMessage: To request a project, contact your system administrator at projectname. [root@dhcp-140-138 roottest]# oc login --token=`oc sa get-token default -n default` https://api.yinzhou25.qe.gcp.devcluster.openshift.com:6443 Logged into "https://api.yinzhou25.qe.gcp.devcluster.openshift.com:6443" as "system:serviceaccount:default:default" using the token provided. To request a project, contact your system administrator at projectname. [root@dhcp-140-138 roottest]# oc new-project ptest Error from server (Forbidden): To request a project, contact your system administrator at projectname. The fix caused a regression tracked in https://bugzilla.redhat.com/show_bug.cgi?id=1849983, moving back to assigned Sally make sure to verify https://docs.openshift.com/container-platform/4.4/applications/projects/configuring-project-creation.html#disabling-project-self-provisioning_configuring-project-creation is working correctly. I'd suggest adding test first and only then fixing this. Since the fix for this bug was reverted, I will be revisiting this bug this sprint. Revisiting this bug, The documentation on how to remove permission for project-requests is clear: https://docs.openshift.com/container-platform/4.4/applications/projects/configuring-project-creation.html#disabling-project-self-provisioning_configuring-project-creation I'm closing this as there was not a regression and the current messages are sufficient: $ oc login -u newton -p password (does not have permission to create projects) Login successful. You don't have any projects. Contact your system administrator to request a project. $ oc project No project has been set. Pass a project name to make that the default. // projectRequestMessage set $ oc new-project test Error from server (Forbidden): You do not have permission to create projects. Contact your system administrator // No projectRequestMessage set: $ oc new-project test Error from server (Forbidden): You may not request a new project via this API. |