Steps to reproduce: 1. Log into the cluster as kubeadmin 2. Select a project from the project list so that you have an active namespace 3. Open User Management -> RoleBindings 4. Click "Create binding" Actual: You are allowed to create a namespace role binding. Expected: You should be shown a radio button asking whether you want to create a namespace or cluster role binding. Notes: The above radio button is displayed when "All Projects" is selected, but it is not obvious you need to do that. It looks like there's no way to create cluster role bindings in the UI. Even on the search page when you select ClusterRoleBinding, there is no create button. I believe this is a regression either in 4.7 or a recent release.
Checked on ocp 4.8 cluster with payload 4.8.0-0.nightly-2021-02-19-111007. 1. Log into the cluster as kubeadmin 2. Select a project from the project list so that you have an active namespace 3. Open User Management -> RoleBindings 4. Click "Create binding", now there are radio buttons for choosing namespace rolebinding and clusterrolebinding, and could create rolebinding/clusterrolebinding successfully. The bug is fixed.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2438