Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-24920

[2166508] Virtualization -> Overview -> Settings page is crashed when the user have no permission to list network-attachment-definitions

XMLWordPrintable

    • Medium
    • None

      Description of problem:
      Virtualization -> Overview -> Settings page is crashed when the user have no permission to list network-attachment-definitions, the related OCP bug is https://issues.redhat.com/browse/OCPBUGS-6959.

      Even with the OCP bug, the page not crash, instead, it shows proper error while editing "Live migration network".

      Version-Release number of selected component (if applicable):
      v4.12.0

      How reproducible:
      100%

      Steps to Reproduce:
      1. create a regular user 'test', reference for creating the 'test' user: https://github.com/openshift/console/blob/master/test-prow-e2e.sh#L52

      2. assign cluster-reader role to this user:
      $ oc adm policy add-cluster-role-to-user cluster-reader test

      3. try to list some resources:
      $ oc get pod --all-namespaces | head -n 2
      NAMESPACE NAME READY STATUS RESTARTS AGE
      alitke virt-launcher-fedora-blue-shark-45r8s 0/1 Completed 0 6d11h
      $ oc get vm --all-namespaces | head -n 2
      NAMESPACE NAME AGE STATUS READY
      alitke fedora-blue-shark 97d Running True
      $ oc get network-attachment-definitions --all-namespaces
      Error from server (Forbidden): network-attachment-definitions.k8s.cni.cncf.io is forbidden: User "test" cannot list resource "network-attachment-definitions" in API group "k8s.cni.cncf.io" at the cluster scope

      4. login the web console with this user, navigate to Virtualization -> Overview -> Settings page

      Actual results:
      the page is crashed

      Expected results:
      the page is not crashed, and it shows a proper error while editing the "Live migration network".

      Additional info:

              rh-ee-dorr Dana Orr
              gouyang1@redhat.com Guohua Ouyang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: