Bug 1916112 - [Assisted-4.6 ]Read only admin cannot fetch openshift_versions
Summary: [Assisted-4.6 ]Read only admin cannot fetch openshift_versions
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: assisted-installer
Version: 4.6
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: 4.6.z
Assignee: Elior Erez
QA Contact: Yuri Obshansky
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-01-14 08:52 UTC by nshidlin
Modified: 2021-03-24 08:25 UTC (History)
3 users (show)

Fixed In Version: OCP-Metal-v1.0.15.2
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-02-01 15:24:36 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:0235 0 None None None 2021-02-01 15:24:54 UTC

Description nshidlin 2021-01-14 08:52:22 UTC 
Description of problem:
Read only admin cannot GET https://api.openshift.com/api/assisted-install/v1/openshift_versions

Version-Release number of selected component (if applicable):
{
    "release_tag": "v1.0.14.3",
    "versions": {
        "assisted-installer": "registry-proxy.engineering.redhat.com/rh-osbs/openshift4-assisted-installer-rhel8:v4.6.0-71",
        "assisted-installer-controller": "registry-proxy.engineering.redhat.com/rh-osbs/openshift4-assisted-installer-reporter-rhel8:v4.6.0-70",
        "assisted-installer-service": "quay.io/app-sre/assisted-service:8fde13c",
        "discovery-agent": "registry-proxy.engineering.redhat.com/rh-osbs/openshift4-assisted-installer-agent-rhel8:v4.6.0-77"
    }
}

How reproducible:
Every time

Steps to Reproduce:
1. Using read only admin credentials GET to https://api.openshift.com/api/assisted-install/v1/openshift_versions

Actual results:
{
    "code": 403,
    "message": "ocp-edge-qe-assisted-installer: Unauthorized to access route (insufficient role read-only-admin)"
}

Expected results:
supported openshift versions are returned:
{
    "4.6": {
        "display_name": "4.6.8",
        "release_image": "quay.io/openshift-release-dev/ocp-release:4.6.8-x86_64",
        "rhcos_image": "https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.6/4.6.8/rhcos-4.6.8-x86_64-live.x86_64.iso",
        "support_level": "production"
    },
    "4.7": {
        "display_name": "4.7-pre-release",
        "release_image": "quay.io/openshift-release-dev/ocp-release@sha256:2419f9cd3ea9bd114764855653012e305ade2527210d332bfdd6dbdae538bd66",
        "rhcos_image": "https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.6/4.6.8/rhcos-4.6.8-x86_64-live.x86_64.iso",
        "support_level": "beta"
    }
}
Comment 1 Michael Filanov 2021-01-18 17:43:17 UTC 
comment to trigger the sync.
Comment 2 Fred Rolland 2021-01-20 12:05:57 UTC 
Checking sync again.
Comment 3 Michael Filanov 2021-01-25 09:39:08 UTC 
comment to trigger the sync.
Comment 5 Yuri Obshansky 2021-01-25 12:50:15 UTC 
(In reply to Michael Filanov from comment #3)
> comment to trigger the sync.

Hi, Please, specify what is fixed version -> "Fixed In Version:"
Otherwise we cannot verify bug
Thank you
Comment 6 nshidlin 2021-01-25 15:59:25 UTC 
Verified on staging v1.0.15.1

curl --location --request GET 'https://api.stage.openshift.com/api/assisted-install/v1/openshift_versions' \
--header 'Authorization: Bearer {TOKEN}'

{
    "4.6": {
        "display_name": "4.6.8",
        "release_image": "quay.io/openshift-release-dev/ocp-release:4.6.8-x86_64",
        "rhcos_image": "https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.6/4.6.8/rhcos-4.6.8-x86_64-live.x86_64.iso",
        "support_level": "production"
    },
    "4.7": {
        "display_name": "4.7-pre-release",
        "release_image": "quay.io/openshift-release-dev/ocp-release@sha256:2419f9cd3ea9bd114764855653012e305ade2527210d332bfdd6dbdae538bd66",
        "rhcos_image": "https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.6/4.6.8/rhcos-4.6.8-x86_64-live.x86_64.iso",
        "support_level": "beta"
    }
}
Comment 8 errata-xmlrpc 2021-02-01 15:24:36 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.15 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:0235
Note You need to log in before you can comment on or make changes to this bug.