-
Bug
-
Resolution: Done-Errata
-
Normal
-
None
-
False
-
-
False
-
CLOSED
-
---
-
---
-
-
-
Medium
-
None
Description of problem:
Virtualization -> Overview -> Settings page is crashed when the user have no permission to list network-attachment-definitions, the related OCP bug is https://issues.redhat.com/browse/OCPBUGS-6959.
Even with the OCP bug, the page not crash, instead, it shows proper error while editing "Live migration network".
Version-Release number of selected component (if applicable):
v4.12.0
How reproducible:
100%
Steps to Reproduce:
1. create a regular user 'test', reference for creating the 'test' user: https://github.com/openshift/console/blob/master/test-prow-e2e.sh#L52
2. assign cluster-reader role to this user:
$ oc adm policy add-cluster-role-to-user cluster-reader test
3. try to list some resources:
$ oc get pod --all-namespaces | head -n 2
NAMESPACE NAME READY STATUS RESTARTS AGE
alitke virt-launcher-fedora-blue-shark-45r8s 0/1 Completed 0 6d11h
$ oc get vm --all-namespaces | head -n 2
NAMESPACE NAME AGE STATUS READY
alitke fedora-blue-shark 97d Running True
$ oc get network-attachment-definitions --all-namespaces
Error from server (Forbidden): network-attachment-definitions.k8s.cni.cncf.io is forbidden: User "test" cannot list resource "network-attachment-definitions" in API group "k8s.cni.cncf.io" at the cluster scope
4. login the web console with this user, navigate to Virtualization -> Overview -> Settings page
Actual results:
the page is crashed
Expected results:
the page is not crashed, and it shows a proper error while editing the "Live migration network".
Additional info:
- blocks
-
CNV-25998 [2172044] Virtualization -> Settings fails for cluster-reader role
- Closed
- external trackers