Bug 1446981 - [dedicated] dedicated-cluster-admin needs to have an ability to view clusterresourcequotas
Summary: [dedicated] dedicated-cluster-admin needs to have an ability to view clusterr...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Accounts and Billing
Version: 3.x
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 3.x
Assignee: Abhishek Gupta
QA Contact: Bing Li
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-05-01 03:51 UTC by Kenjiro Nakayama
Modified: 2020-06-11 13:44 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-11-09 18:52:27 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Kenjiro Nakayama 2017-05-01 03:51:23 UTC
Description of problem:
---
- Although Red Hat configured clusterresourcequotas for the dedicated cluster, the customer (dedicated users) cannot see the quota by themselves. That's inconvenient and as an admin users want to check current quota and consumed resources.

Version-Release number of selected component (if applicable):
- OpenShift Dedicated

Steps to Reproduce:
---
1. Run "oc get clusterresourcequota"

Actual results:
---
  $oc describe clusterresourcequota persistent-volume 
  Error from server: User "<USER_HAS_DEDICATED_CLUSTER_ADMIN_ROLE>" cannot get clusterresourcequotas at the cluster scope

Expected results:
---
  $oc describe clusterresourcequota persistent-volume shows the quota.

Comment 3 Brenton Leanhardt 2017-05-02 19:29:26 UTC
I'm proposing we simply track this as a bug.  Abhishek has already merged the patch.  I'm moving this to MODIFIED.  Abhishek, can you have this deployed somewhere QE can test and the move it ON_QA?

Comment 4 Brenton Leanhardt 2017-05-02 19:33:15 UTC
Online didn't have an RFE component so I picked what I thought was at least somewhat reasonable.

Comment 6 Bing Li 2017-07-11 02:31:30 UTC
Verified in ded-stage-aws: clusterrole "dedicated-cluster-admin" has the ability to view clusterresourcequotas:

$oc get clusterrole dedicated-cluster-admin -o json
......
        {
            "apiGroups": [
                ""
            ],
            "attributeRestrictions": null,
            "resources": [
                "clusterresourcequotas",
                "events",
                "minions",
                "nodes",
                "persistentvolumes",
                "securitycontextconstraints"
            ],
            "verbs": [
                "get",
                "list",
                "watch"
            ]
        },
......

Version:
OpenShift Master:  v3.5.5.26
Kubernetes Master: v1.5.2+43a9be4


Note You need to log in before you can comment on or make changes to this bug.