Hide Forgot
Created attachment 1747689 [details] create vm from template Description of problem: Login with a normal user 'test' and create a template via template wizard, then create a vm from this template, it shows an error: Error "Authorization failed, message is: User system:serviceaccount:test:default has insufficient permissions in clone source namespace ${SRC_PVC_NAMESPACE}" for field "spec.dataVolumeTemplates[0]". Version-Release number of selected component (if applicable): OCP 4.7 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Can you please provide exact steps how you created the template ? It seems to work fine for me, so Im apparently missing something. can you post template YAML too ?
To me it looks like parameter substitution is not happening, ${SRC_PVC_NAMESPACE} should have been replaced with the actual namespace name (openshift-virualization-os-images)
Created attachment 1748348 [details] create vm from yaml
(In reply to Rastislav Wagner from comment #1) > Can you please provide exact steps how you created the template ? It seems > to work fine for me, so Im apparently missing something. > > can you post template YAML too ? It can be simply reproduced by creating vm from the default yaml(without a change), see the new attachment, it should be the same issue.
fixed on latest UI
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:5633