Bug 1426139 - [upgrade] Failed to grant view role to others after upgrade
Summary: [upgrade] Failed to grant view role to others after upgrade
Keywords:
Status: CLOSED DUPLICATE of bug 1420636
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Cluster Version Operator
Version: 3.5.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Scott Dodson
QA Contact: Anping Li
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-02-23 09:41 UTC by Xingxing Xia
Modified: 2017-02-23 11:00 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-02-23 11:00:15 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Xingxing Xia 2017-02-23 09:41:59 UTC
Description of problem:
Failed to grant view role to others after upgrade (3.4.1 to 3.5.0). Other roles such as "edit" have no this problem.

Version-Release number of selected component (if applicable):
before upgrade: openshift v3.4.1.7 
after upgrade: openshift v3.5.0.20

How reproducible:
Not sure

Steps to Reproduce:
1. After upgrade, run:
$ oc policy add-role-to-user view anyusername
2.
3.

Actual results:
1. Failed with msg [*1]:
Error from server (Forbidden): rolebinding "view" is forbidden: user "..." cannot grant extra privileges:
{Verbs:["create"], APIGroups:[""], Resources:["resourcequotausages"]}

Expected results:
1. Should succeed

Additional info:
[*1] The failure has nothing to do with whether current user and project are created before or after upgrade

Comment 3 Anping Li 2017-02-23 11:00:15 UTC
The error was caused by https://bugzilla.redhat.com/show_bug.cgi?id=1420636 which is a duplicated bug of Bug 1405479.  After we fix the issue with the workaround the in https://bugzilla.redhat.com/show_bug.cgi?id=1420636#c17. The error disappeared.

*** This bug has been marked as a duplicate of bug 1420636 ***


Note You need to log in before you can comment on or make changes to this bug.