1. Disabling project self-provisioning # oc patch clusterrolebinding.rbac self-provisioners -p '{"subjects": null}' clusterrolebinding.rbac.authorization.k8s.io/self-provisioners patched # oc patch clusterrolebinding.rbac self-provisioners -p '{ "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "false" } } }' # oc describe clusterrolebinding.rbac self-provisioners Name: self-provisioners Labels: <none> Annotations: rbac.authorization.kubernetes.io/autoupdate: false Role: Kind: ClusterRole Name: self-provisioner Subjects: Kind Name Namespace ---- ---- --------- 2. Customize project request message # oc edit project.config.openshift.io/cluster project.config.openshift.io/cluster edited # oc get project.config.openshift.io/cluster -o yaml apiVersion: config.openshift.io/v1 kind: Project metadata: annotations: release.openshift.io/create-only: "true" creationTimestamp: "2020-02-24T00:50:30Z" generation: 2 name: cluster resourceVersion: "220199" selfLink: /apis/config.openshift.io/v1/projects/cluster uid: 689ef5c6-97bb-4bc3-b1dd-688ad10c3638 spec: projectRequestMessage: This is customized by yapei, please contact her 3. Login via CLI oc login https://api.qe-ui-02240831.qe.devcluster.openshift.com:6443 -u yapei1 -p redhat Login successful. You don't have any projects. Contact your system administrator to request a project. # oc new-project yapei1-1 Error from server (Forbidden): This is customized by yapei, please contact her 4. Login via console as user 'yapei1', check Workloads -> Deployments , open project dropdown, no 'Create Project' button in dropdown list Verified on 4.4.0-0.nightly-2020-02-28-000349
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0581