Bug 1496694
| Summary: | cluster role need update to track current resources name of servicecatalog api group for v3.7 | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | weiwei jiang <wjiang> |
| Component: | Service Broker | Assignee: | Matthew Staebler <mstaeble> |
| Status: | CLOSED ERRATA | QA Contact: | weiwei jiang <wjiang> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 3.7.0 | CC: | aos-bugs, bleanhar, chezhang, ewolinet, jmatthew, jokerman, jpeeler, mmccomas, pmorie, sdodson, wmeng, xiuwang, xtian, xxia |
| Target Milestone: | --- | ||
| Target Release: | 3.7.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | No Doc Update | |
| Doc Text: |
undefined
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-11-28 22:13:20 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
weiwei jiang
2017-09-28 07:21:58 UTC
The card will block all the service-catalog related testing for v3.7 since the resource name is changed. And for now we have to grant the related user/sa with cluster-admin as a workaround. Checked with openshift-ansible-3.7.0-0.174.0.git.0.01932ad.el7.noarch.rpm, and found that cluster admin and edit is still using the old name.
# oc get clusterrole admin -o yaml |grep -A 20 -B 1 -i servicecatalog
- apiGroups:
- servicecatalog.k8s.io
attributeRestrictions: null
resources:
- bindings
- instances
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- settings.k8s.io
attributeRestrictions: null
resources:
- podpresets
verbs:
- create
- delete
- get
# oc get clusterrole edit -o yaml |grep -A 20 -B 1 -i servicecatalog
- apiGroups:
- servicecatalog.k8s.io
attributeRestrictions: null
resources:
- bindings
- instances
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- settings.k8s.io
attributeRestrictions: null
resources:
- podpresets
verbs:
- create
- delete
- get
TASK [openshift_service_catalog : Generate apply template for clusterrole/edit] ***
Monday 23 October 2017 07:50:34 +0000 (0:00:00.546) 0:12:10.451 ********
changed: [host-xxxxxx] => {"changed": true, "checksum": "0e40a1cffb1db2144c98464a75ef5cfddaaedc5e", "dest": "/tmp/openshift-service-catalog-ansible-RKMkF5/edit_sc_patch.yml", "failed": false, "gid": 0, "group": "root", "md5sum": "a1841d2c062ff5a6da52b26e9ac1b025", "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 5629, "src": "/root/.ansible/tmp/ansible-tmp-1508745035.06-202443114384748/source", "state": "file", "uid": 0}
TASK [openshift_service_catalog : Generate apply template for clusterrole/admin] ***
Monday 23 October 2017 07:50:36 +0000 (0:00:00.514) 0:12:12.100 ********
changed: [host-xxxxxx] => {"changed": true, "checksum": "badd0104a447eb9e2903cce2bb1f006b3f944b64", "dest": "/tmp/openshift-service-catalog-ansible-RKMkF5/admin_sc_patch.yml", "failed": false, "gid": 0, "group": "root", "md5sum": "a1d407f963f44429e77fd614f2127133", "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 6949, "src": "/root/.ansible/tmp/ansible-tmp-1508745036.73-275476748680638/source", "state": "file", "uid": 0}
Will give a try after https://bugzilla.redhat.com/show_bug.cgi?id=1496426 fixed. Verified and passed on Brew v3.7.0-0.189.0 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3188 |