Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-15060

"Duplicate RoleBinding" leads to "Unsupported value" error

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 4.14.0
    • 4.12.z
    • Management Console
    • None
    • +
    • Moderate
    • No
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      When clicking on "Duplicate RoleBinding" in the OpenShift Container Platform Web Console, users are taken to a form where they can review the duplicated RoleBinding.
      
      When the RoleBinding has a ServiceAccount as a subject, clicking "Create" leads to the following error:
      
      An error occurred
      Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup".
      
      The root cause seems to be that the field "subjects[0].apiGroup" is set to "rbac.authorization.k8s.io" even for "kind: ServiceAccount" subjects. For "kind: ServiceAccount" subjects, this field is not necessary but the "namespace" field should be set instead.
      
      The functionality works as expected for User and Group subjects.

      Version-Release number of selected component (if applicable):

      OpenShift Container Platform 4.12.19

      How reproducible:

      Always

      Steps to Reproduce:

      1. In the OpenShift Container Platform Web Console, click on "User Management" => "Role Bindings"
      2. Search for a RoleBinding that has a "ServiceAccount" as the subject. On the far right, click on the dots and choose "Duplicate RoleBinding"
      3. Review the fields, set a new name for the duplicated RoleBinding, click "Create"

      Actual results:

      Duplicating fails with the following error message being shown:
      
      An error occurred
      Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup".

      Expected results:

      RoleBinding is duplicated without an error message

      Additional info:

      Reproduced with OpenShift Container Platform 4.12.18 and 4.12.19

              rh-ee-mziska Marek Ziska
              rhn-support-skrenger Simon Krenger
              Yanping Zhang Yanping Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: