Bug 1326273 - Couldn't add
Summary: Couldn't add
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: unspecified
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Ravi Sankar
QA Contact: weiwei jiang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-12 10:08 UTC by Yadan Pei
Modified: 2019-03-29 15:51 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-12 10:09:14 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Yadan Pei 2016-04-12 10:08:32 UTC
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Create a group and add user 'user1' to it
$ oadm groups new test-group 
$ oadm groups add-users test-group user1
2. Add cluster role dedicated-cluster-admin to group 'test-group' using scripts, printing debug info
$ python apply-dedicated-roles.py -c dedicated-cluster-admin.json -p dedicated-project-admin.json -g test-group -s excluded-project -v
3. Login with user1, could list all project except for 'excluded-project'
4. Normal user create a new project  'normal-prj1'
$ oc new-project normal-prj1
5. Login with user1, could see newly created project 'normal-prj1', also could see following message printed from scripts
Adding role dedicated-project-admin to groups test-group in project normal-prj1
6. Normal user delete project 'normal-prj1'
7. Login with user1, project 'normal-prj1' is removed from project list, could see following message printed from scripts 
Removing role dedicated-project-admin from groups test-group in project normal-prj1 ... 
OK
Failed to remove role dedicated-project-admin from groups test-group in project normal-prj1: error: unable to locate RoleBinding for /dedicated-project-admin
8. Normal user re-create a project using the same name "normal-prj1"
9. Login with user1 again, couldn't see project "normal-prj1"

Actual results:
9. Didn't add role dedicated-project-admin to groups test-group in project "normal-prj1"

Expected results:
9. Should add role dedicated-project-admin to groups test-group in project "normal-prj1" successfully

Additional info:


Note You need to log in before you can comment on or make changes to this bug.