-
Bug
-
Resolution: Done
-
Major
-
4.12.z
-
None
Description of problem:
When clicking on "Duplicate RoleBinding" in the OpenShift Container Platform Web Console, users are taken to a form where they can review the duplicated RoleBinding. When the RoleBinding has a ServiceAccount as a subject, clicking "Create" leads to the following error: An error occurred Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup". The root cause seems to be that the field "subjects[0].apiGroup" is set to "rbac.authorization.k8s.io" even for "kind: ServiceAccount" subjects. For "kind: ServiceAccount" subjects, this field is not necessary but the "namespace" field should be set instead. The functionality works as expected for User and Group subjects.
Version-Release number of selected component (if applicable):
OpenShift Container Platform 4.12.19
How reproducible:
Always
Steps to Reproduce:
1. In the OpenShift Container Platform Web Console, click on "User Management" => "Role Bindings" 2. Search for a RoleBinding that has a "ServiceAccount" as the subject. On the far right, click on the dots and choose "Duplicate RoleBinding" 3. Review the fields, set a new name for the duplicated RoleBinding, click "Create"
Actual results:
Duplicating fails with the following error message being shown: An error occurred Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup".
Expected results:
RoleBinding is duplicated without an error message
Additional info:
Reproduced with OpenShift Container Platform 4.12.18 and 4.12.19
- blocks
-
OCPBUGS-16158 "Duplicate RoleBinding" leads to "Unsupported value" error
- Closed
- is cloned by
-
OCPBUGS-16158 "Duplicate RoleBinding" leads to "Unsupported value" error
- Closed
- links to