Bug 2076690 - RoleBidings are not getting updated for ClusterRole in OpenShift Web Console
Summary: RoleBidings are not getting updated for ClusterRole in OpenShift Web Console
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.9
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 4.9.z
Assignee: Robb Hamilton
QA Contact: Salvatore Colangelo
URL:
Whiteboard:
Depends On: 2072839
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-19 16:38 UTC by OpenShift BugZilla Robot
Modified: 2022-06-09 06:42 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-06-09 06:41:53 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 11362 0 None open [release-4.9] [release-4.10] Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings 2022-04-19 16:38:44 UTC
Red Hat Product Errata RHBA-2022:4906 0 None None None 2022-06-09 06:42:12 UTC

Description OpenShift BugZilla Robot 2022-04-19 16:38:32 UTC
+++ This bug was initially created as a clone of Bug #2072839 +++

+++ This bug was initially created as a clone of Bug #2071599 +++

Created attachment 1870648 [details]
Rolebinding for clusterrole is not getting displayed

Description of problem:
Rolebindings are not getting updated for ClusterRole `system:image-builder` iOpenShift web console.

Version-Release number of selected component (if applicable):
OCP 4.9.25

How reproducible:
Always

Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`

Scenario II :
1. Create a project.
2. Create a user.
3. Assign clusterrole `system:image-builder` to the user.
4. Under User Management, select Roles
5. Select `system:image-builder` , go to Rolebindings
`User Management -> Roles -> system:image-builder -> RoleBindings`

Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.

Additional info:
This is not working in OCP 4.9.17, 4.9.23, 4.9.25, 4.10.3
Screenshot is attached.

--- Additional comment from scolange on 2022-04-08 11:57:19 UTC ---

Hi 

Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


VERIFIED!!

Wainting for second scenario

--- Additional comment from scolange on 2022-04-15 16:04:44 UTC ---

HI 

  Scenario II :
1. Create a project.
2. Create a user.
3. Assign clusterrole `system:image-builder` to the user.
4. Under User Management, select Roles
5. Select `system:image-builder` , go to Rolebindings
`User Management -> Roles -> system:image-builder -> RoleBindings`

Verified!

Comment 2 Salvatore Colangelo 2022-04-21 22:43:28 UTC
[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest   True        False         4m28s   Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest


Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.

See Attachement

Comment 3 Robb Hamilton 2022-04-21 23:21:59 UTC
Hi, Salvatore.  The fix in https://github.com/openshift/console/pull/11362 hasn't merged yet.  Did you test with the fix applied?

Comment 4 Salvatore Colangelo 2022-04-22 15:45:46 UTC
Hi , 
 as you can see in comment 

[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest   True        False         4m28s   Cluster version is 4.9.0-0.ci.test-2022-04-21-220809-ci-ln-0b0sjqk-latest

launch openshift/console#11362

Comment 5 Robb Hamilton 2022-04-25 15:38:46 UTC
It turns out 4.9 is missing a related bug fix.  See https://github.com/openshift/console/pull/11362#issuecomment-1108733365

Comment 6 Salvatore Colangelo 2022-04-30 01:07:45 UTC
[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.nightly-2022-04-27-100704   True        False         14m     Cluster version is 4.9.0-0.nightly-2022-04-27-100704


job: https://mastern-jenkins-csb-openshift-qe.apps.ocp-c1.prod.psi.redhat.com/job/ocp-common/job/Flexy-install/98621/

installer_payload_image: registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-04-27-100704




Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


Actual results:
For ClusterRole `system:image-builder`, RoleBindings are not getting displayed under RoleBindings tab in OpenShift web console.

Expected results:
Rolebindings for ClusterRole `system:image-builder` should get displayed under RoleBindings tab in OpenShift web console.


Problem still there

Comment 7 Robb Hamilton 2022-05-02 13:08:10 UTC
Salvatore, did you test with the change from https://github.com/openshift/console/pull/11362?  I just re-tested using cluster-bot (e.g., launch openshift/console#11362) and the bug is fixed when I visit /k8s/cluster/clusterroles/system%3Aimage-puller/bindings.

Comment 9 Salvatore Colangelo 2022-05-11 11:45:34 UTC
[scolange@scolange ~]$ oc get clusterversion
NAME      VERSION                                                  AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest   True        False         27m     Cluster version is 4.9.0-0.ci.test-2022-05-11-103651-ci-ln-1sg3v72-latest


Steps to Reproduce:
Scenario I :
1. Go to Administrator console
2. Under User Management, select Roles
3. Select `system:image-builder` , go to Rolebindings 
`User Management -> Roles -> system:image-builder -> RoleBindings`


lGMT

Comment 14 errata-xmlrpc 2022-06-09 06:41:53 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.9.37 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:4906


Note You need to log in before you can comment on or make changes to this bug.