Description of problem: login with a user withous admin permission. $ oc get virtualmachineinstancemigrations No resources found. Error from server (Forbidden): virtualmachineinstancemigrations.kubevirt.io is forbidden: User "ghua" cannot list resource "virtualmachineinstancemigrations" in API group "kubevirt.io" in the namespace "default" The error is also visible on UI when browsing project status. Version-Release number of selected component (if applicable): hco-26 How reproducible: 100% Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: The issue is very similar with https://bugzilla.redhat.com/show_bug.cgi?id=1720433.
Marc, could this bug be similar to bug 1720433?
yes it is, incomplete RBAC rules for the new virtualmachineinstancemigration resource on the view/edit/admin cluster roles, will add them to the upstream PR https://github.com/kubevirt/kubevirt/pull/2391
upstream backport PR is merged: https://github.com/kubevirt/kubevirt/pull/2394
verify with build hco-bundle-registry:v2.0.0-36 NAME UID FULL NAME IDENTITIES pm1 0c9dd68e-9e23-11e9-b522-0a580a810033 htpassidp:pm1 pm2 71c2fcfd-9e22-11e9-b522-0a580a810033 htpassidp:pm2 login as normal user $oc whoami pm2 $oc get virtualmachineinstancemigrations NAME AGE kubevirt-evacuation-fvcnr 12h kubevirt-evacuation-s7757 13h login webui with user pm2 no error when access project status move to verified.