Bug 2071599

Summary: RoleBidings are not getting updated for ClusterRole in OpenShift Web Console
Product: OpenShift Container Platform Reporter: Suruchi Dharma <sdharma>
Component: Management ConsoleAssignee: Robb Hamilton <rhamilto>
Status: CLOSED ERRATA QA Contact: Xiyun Zhao <xiyuzhao>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.9CC: aos-bugs, jhadvig, yapei
Target Milestone: ---   
Target Release: 4.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-08-10 11:03:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2072839    
Attachments:
Description Flags
Rolebinding for clusterrole is not getting displayed none

Description Suruchi Dharma 2022-04-04 10:35:10 UTC
Created attachment 1870648 [details]
Rolebinding for clusterrole is not getting displayed

Description of problem:
Rolebindings are not getting updated for ClusterRole `system:image-builder` iOpenShift web console.

Version-Release number of selected component (if applicable):
OCP 4.9.25

How reproducible:
Always

Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`

Scenario II :
1. Create a project.
2. Create a user.
3. Assign clusterrole `system:image-builder` to the user.
4. Under User Management, select Roles
5. Select `system:image-builder` , go to Rolebindings
`User Management -> Roles -> system:image-builder -> RoleBindings`

Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.

Additional info:
This is not working in OCP 4.9.17, 4.9.23, 4.9.25, 4.10.3
Screenshot is attached.

Comment 3 Xiyun Zhao 2022-04-12 02:38:51 UTC
This bug has been verified on payload 4.11.0-0.nightly-2022-04-11-200046

Verification Step:
1. Follow the two scenario that provide on bug description, and check the result
2. After finish the steps for Scenario II:
    1) login OCP as the created user
    2) Create a new project for the user
    3) Navigate to User Management -> Rolebinding page
    4) Check if system:image-builders is listed on page

Result:
1. RoleBindings for ClusterRole system:image-builder get correctly displayed in ClusterRole details -> RoleBindings page
2. For a normal user, the rolebinding for clusterrole system:image-builder is listed in UserManagement -> RoleBindings page correctly

Comment 5 errata-xmlrpc 2022-08-10 11:03:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069