Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1508582 - non-admin users aren't able to update ServiceInstances
non-admin users aren't able to update ServiceInstances
Status: CLOSED ERRATA
Product: OpenShift Container Platform
Classification: Red Hat
Component: Service Broker (Show other bugs)
3.7.0
Unspecified Unspecified
unspecified Severity unspecified
: ---
: 3.7.0
Assigned To: Jeff Peeler
Qixuan Wang
:
Depends On: 1507617
Blocks:
  Show dependency treegraph
 
Reported: 2017-11-01 13:55 EDT by Jeff Peeler
Modified: 2017-11-28 17:20 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: RBAC rules were missing for ServiceInstances for non-admin users. Consequence: Users could not update ServiceInstances. Fix: Add RBAC rule to allow ServiceInstance patch. Result: This allows users to update ServiceInstances.
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-11-28 17:20:57 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:3188 normal SHIPPED_LIVE Moderate: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update 2017-11-28 21:34:54 EST

  None (edit)
Description Jeff Peeler 2017-11-01 13:55:47 EDT
This is the "oc cluster up" portion of bug #1507598.
Comment 1 Jeff Peeler 2017-11-01 13:56:27 EDT
https://github.com/openshift/origin/pull/17134
Comment 3 Qixuan Wang 2017-11-08 00:45:34 EST
“oc cluster up” can establish service catalog. However, ansible service broker need template (https://raw.githubusercontent.com/openshift/ansible-service-broker/master/templates/deploy-ansible-service-broker.template.yaml) to start, it's blocked by https://bugzilla.redhat.com/show_bug.cgi?id=1507617, so defer verifying.
Comment 4 Qixuan Wang 2017-11-09 06:31:00 EST
Tested on OCP (openshift v3.7.0-0.198.0, kubernetes v1.7.6+a08f5eeb62, etcd 3.2.8, ose-service-catalog:v3.7.0), the bug has been fixed, thanks.


Here is the test result:
[root@host-172-16-120-99 ~]# oc whoami
qwang

[root@host-172-16-120-99 ~]# oc get serviceinstance dh-rhscl-postgresql-apb-7z927 -o yaml | grep Plan
  clusterServicePlanExternalName: dev
  clusterServicePlanRef:
    clusterServicePlanExternalID: 9f90a44d8181941768273a684de50de5
    clusterServicePlanExternalName: dev

Update plan: dev->prod

[root@host-172-16-120-99 ~]# oc edit serviceinstance dh-rhscl-postgresql-apb-7z927
serviceinstance "dh-rhscl-postgresql-apb-7z927" edited

[root@host-172-16-120-99 ~]# oc get serviceinstance dh-rhscl-postgresql-apb-7z927 -o yaml | grep Plan
  clusterServicePlanExternalName: prod
  clusterServicePlanRef:
    clusterServicePlanExternalID: b2dfdcfa094694aa7377a1c69b3100a6
    clusterServicePlanExternalName: prod
Comment 7 errata-xmlrpc 2017-11-28 17:20:57 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3188

Note You need to log in before you can comment on or make changes to this bug.