Bug 1804708 - project.spec.projectRequestMessage not applied in all places
Summary: project.spec.projectRequestMessage not applied in all places
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.3.0
Hardware: All
OS: All
unspecified
medium
Target Milestone: ---
: 4.3.z
Assignee: Robb Hamilton
QA Contact: Yadan Pei
URL:
Whiteboard:
: 1807189 (view as bug list)
Depends On: 1806585
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-02-19 13:46 UTC by Robb Hamilton
Modified: 2020-04-30 01:28 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Users without the ability to create projects still see the "Create Project" action. Consequence: Users can try to create a project, but will be met with an error message stating they can not create projects. Fix: The "Create Project" action should not be visible to users without the ability to create projects. Result: Users without the ability to create projects never see the error message (customized or otherwise) as the "Create Project" action is not visible.
Clone Of: 1802577
Environment:
Last Closed: 2020-04-30 01:28:07 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 4369 0 None closed [release-4.3] Bug 1804708: only show "Create Project" option in project dropdown i… 2020-04-24 17:18:17 UTC
Red Hat Product Errata RHBA-2020:1529 0 None None None 2020-04-30 01:28:21 UTC

Comment 1 Robb Hamilton 2020-02-25 19:15:13 UTC 
*** Bug 1807189 has been marked as a duplicate of this bug. ***
Comment 5 shahan 2020-04-20 08:22:59 UTC 
1. Disabling project self-provisioning
# oc patch clusterrolebinding.rbac self-provisioners -p '{"subjects": null}'
clusterrolebinding.rbac.authorization.k8s.io/self-provisioners patched
# oc patch clusterrolebinding.rbac self-provisioners -p '{ "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "false" } } }'
# oc describe clusterrolebinding.rbac self-provisioners
Name:         self-provisioners
Labels:       <none>
Annotations:  rbac.authorization.kubernetes.io/autoupdate: false
Role:
  Kind:  ClusterRole
  Name:  self-provisioner
Subjects:
  Kind  Name  Namespace
  ----  ----  ---------
2. Customize project request message
# oc edit project.config.openshift.io/cluster
project.config.openshift.io/cluster edited
# oc get project.config.openshift.io/cluster -o yaml
apiVersion: config.openshift.io/v1
kind: Project
metadata:
  annotations:
    release.openshift.io/create-only: 'true'
  creationTimestamp: '2020-04-19T23:14:39Z'
  generation: 1
  managedFields:
    - apiVersion: config.openshift.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            .: {}
            'f:release.openshift.io/create-only': {}
        'f:spec': {}
      manager: cluster-version-operator
      operation: Update
      time: '2020-04-19T23:14:39Z'
  name: cluster
  resourceVersion: '1837'
  selfLink: /apis/config.openshift.io/v1/projects/cluster
  uid: 602ef193-d6fe-4782-9dcc-7eb511c28558
spec:
  projectRequestMessage: ask hasha to request project

3. goto podlist page with the user owned a project, and click the project dropdown, there will not have a entry to create the new project.
4.3.0-0.nightly-2020-04-18-075046
Comment 7 errata-xmlrpc 2020-04-30 01:28:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:1529
Note You need to log in before you can comment on or make changes to this bug.