+++ This bug was initially created as a clone of Bug #2072839 +++ +++ This bug was initially created as a clone of Bug #2071599 +++ Created attachment 1870648 [details] Rolebinding for clusterrole is not getting displayed Description of problem: Rolebindings are not getting updated for ClusterRole `system:image-builder` iOpenShift web console. Version-Release number of selected component (if applicable): OCP 4.9.25 How reproducible: Always Steps to Reproduce: Scenario I : 1. Go to Administrator console 2. Under User Management, select Roles 3. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` Scenario II : 1. Create a project. 2. Create a user. 3. Assign clusterrole `system:image-builder` to the user. 4. Under User Management, select Roles 5. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` Actual results: For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console. Expected results: Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console. Additional info: This is not working in OCP 4.9.17, 4.9.23, 4.9.25, 4.10.3 Screenshot is attached. --- Additional comment from scolange on 2022-04-08 11:57:19 UTC --- Hi Steps to Reproduce: Scenario I : 1. Go to Administrator console 2. Under User Management, select Roles 3. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` VERIFIED!! Wainting for second scenario --- Additional comment from scolange on 2022-04-15 16:04:44 UTC --- HI Scenario II : 1. Create a project. 2. Create a user. 3. Assign clusterrole `system:image-builder` to the user. 4. Under User Management, select Roles 5. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` Verified!
[scolange@scolange ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest True False 4m28s Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest Steps to Reproduce: Scenario I : 1. Go to Administrator console 2. Under User Management, select Roles 3. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` Actual results: For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console. Expected results: Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console. See Attachement
Hi, Salvatore. The fix in https://github.com/openshift/console/pull/11362 hasn't merged yet. Did you test with the fix applied?
Hi , as you can see in comment [scolange@scolange ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest True False 4m28s Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest launch openshift/console#11362
It turns out 4.9 is missing a related bug fix. See https://github.com/openshift/console/pull/11362#issuecomment-1108733365
[scolange@scolange ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.9.0-0.nightly-2022-04-27-100704 True False 14m Cluster version is 4.9.0-0.nightly-2022-04-27-100704 job: https://mastern-jenkins-csb-openshift-qe.apps.ocp-c1.prod.psi.redhat.com/job/ocp-common/job/Flexy-install/98621/ installer_payload_image: registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-04-27-100704 Steps to Reproduce: Scenario I : 1. Go to Administrator console 2. Under User Management, select Roles 3. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` Actual results: For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console. Expected results: Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console. Problem still there
Salvatore, did you test with the change from https://github.com/openshift/console/pull/11362? I just re-tested using cluster-bot (e.g., launch openshift/console#11362) and the bug is fixed when I visit /k8s/cluster/clusterroles/system%3Aimage-puller/bindings.
[scolange@scolange ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest True False 27m Cluster version is 4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest Steps to Reproduce: Scenario I : 1. Go to Administrator console 2. Under User Management, select Roles 3. Select `system:image-builder` , go to Rolebindings `User Management -> Roles -> system:image-builder -> RoleBindings` lGMT
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.9.37 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:4906