Bug 2076690

Summary:	RoleBidings are not getting updated for ClusterRole in OpenShift Web Console
Product:	OpenShift Container Platform	Reporter:	OpenShift BugZilla Robot <openshift-bugzilla-robot>
Component:	Management Console	Assignee:	Robb Hamilton <rhamilto>
Status:	CLOSED ERRATA	QA Contact:	Salvatore Colangelo <scolange>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	4.9	CC:	aos-bugs, jhadvig, scolange, yanpzhan
Target Milestone:	---
Target Release:	4.9.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-06-09 06:41:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2072839
Bug Blocks:

Description OpenShift BugZilla Robot 2022-04-19 16:38:32 UTC

+++ This bug was initially created as a clone of Bug #2072839 +++

+++ This bug was initially created as a clone of Bug #2071599 +++

Created attachment 1870648 [details]
Rolebinding for clusterrole is not getting displayed

Description of problem:
Rolebindings are not getting updated for ClusterRole `system:image-builder` iOpenShift web console.

Version-Release number of selected component (if applicable):
OCP 4.9.25

How reproducible:
Always

Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`

Scenario II :
1. Create a project.
2. Create a user.
3. Assign clusterrole `system:image-builder` to the user.
4. Under User Management, select Roles
5. Select `system:image-builder` , go to Rolebindings
`User Management -> Roles -> system:image-builder -> RoleBindings`

Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.

Additional info:
This is not working in OCP 4.9.17, 4.9.23, 4.9.25, 4.10.3
Screenshot is attached.

--- Additional comment from scolange on 2022-04-08 11:57:19 UTC ---

Hi 

Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


VERIFIED!!

Wainting for second scenario

--- Additional comment from scolange on 2022-04-15 16:04:44 UTC ---

HI 

  Scenario II :
1. Create a project.
2. Create a user.
3. Assign clusterrole `system:image-builder` to the user.
4. Under User Management, select Roles
5. Select `system:image-builder` , go to Rolebindings
`User Management -> Roles -> system:image-builder -> RoleBindings`

Verified!

Comment 2 Salvatore Colangelo 2022-04-21 22:43:28 UTC

[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest   True        False         4m28s   Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest


Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.

See Attachement

Comment 3 Robb Hamilton 2022-04-21 23:21:59 UTC

Hi, Salvatore.  The fix in https://github.com/openshift/console/pull/11362 hasn't merged yet.  Did you test with the fix applied?

Comment 4 Salvatore Colangelo 2022-04-22 15:45:46 UTC

Hi , 
 as you can see in comment 

[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest   True        False         4m28s   Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest

launch openshift/console#11362

Comment 5 Robb Hamilton 2022-04-25 15:38:46 UTC

It turns out 4.9 is missing a related bug fix.  See https://github.com/openshift/console/pull/11362#issuecomment-1108733365

Comment 6 Salvatore Colangelo 2022-04-30 01:07:45 UTC

[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.nightly-2022-04-27-100704   True        False         14m     Cluster version is 4.9.0-0.nightly-2022-04-27-100704


job: https://mastern-jenkins-csb-openshift-qe.apps.ocp-c1.prod.psi.redhat.com/job/ocp-common/job/Flexy-install/98621/

installer_payload_image: registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-04-27-100704




Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.


Problem still there

Comment 7 Robb Hamilton 2022-05-02 13:08:10 UTC

Salvatore, did you test with the change from https://github.com/openshift/console/pull/11362?  I just re-tested using cluster-bot (e.g., launch openshift/console#11362) and the bug is fixed when I visit /k8s/cluster/clusterroles/system%3Aimage-puller/bindings.

Comment 9 Salvatore Colangelo 2022-05-11 11:45:34 UTC

[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest   True        False         27m     Cluster version is 4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest


Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


lGMT

Comment 14 errata-xmlrpc 2022-06-09 06:41:53 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.9.37 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:4906