Hide Forgot
Description of problem: When running the script to add some users and groups to dedicated admins,should have space between --group and users. Now,wsun is not added,but wsun= is added. Version-Release number of selected component (if applicable): QE V3 Cluster How reproducible: Always Steps to Reproduce: 1.oc describe clusterrolebinding dedicated-cluster-admin 2. 3. Actual results: Users: wsun= Expected results: Should be wsun Additional info:
Looks like incorrect configuration in /etc/sysconfig/openshift-dedicated-role All the parameters are passed via one variable $OPTIONS in /etc/sysconfig/openshift-dedicated-role and you need to ensure there is a space between each of the parameters. This is wrong: OPTIONS="\ --project-role-file=/etc/openshift-dedicated/project-admin-role.json \ ... --users=wsun\ --groups= \ " It should be: OPTIONS="\ --project-role-file=/etc/openshift-dedicated/project-admin-role.json \ ... --users=wsun \[should end with space here] --groups= \ "
Checked the QE V3 Cluster,the wsun is still not dedicated admins,but wsun= is still dedicated admins .
I believe this bug was moved to ON_QA before the config change was applied to the INT cluster. I will work with Stefanie tomorrow to get this configuration resolved.
Fixed: OPTIONS="\ --project-role-file=/etc/openshift-dedicated/project-admin-role.json \ --cluster-role-file=/etc/openshift-dedicated/cluster-admin-role.json \ --skip-projects=default,openshift-infra \ --users=wjiang,wsun \ --groups= \ --verbose \ "
Now wjiang, wsun=, wsun are dedicated admin.I think it's better to use -r/--recreate ,then wsun= will be removed from the dedicated admin ,since wsun= is not actual user.
Added --recreate and restarted service. OPTIONS="\ --project-role-file=/etc/openshift-dedicated/project-admin-role.json \ --cluster-role-file=/etc/openshift-dedicated/cluster-admin-role.json \ --skip-projects=default,openshift-infra \ --users=wjiang,wsun \ --recreate \ --groups= \ --verbose \ "
Sorry,seems like --recreate option could not delete rolebinding,just could delete role. But anyway wsun is added to dedicated admins.So I verify this bug now.Thanks!