Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-1522

Regular user cannot open the debug container from pods they created

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 4.12.0
    • 4.12, 4.11, 4.10
    • Management Console
    • None
    • None
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Customer Facing

      Description of problem:

      Normal user cannot open the debug container from the pods(crashLoopbackoff) they created, And would be got error message:
      pods "<pod name>" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>

      Version-Release number of selected component (if applicable):

      4.12.0-0.nightly-2022-09-20-040107, 4.11.z, 4.10.z

      How reproducible:

      Always

      Steps to Reproduce:

      1. Login OCP as a normal user
         eg: flexy-htpasswd-provider
      2. Create a project, go to Developer prespective -> +Add page
      3. Click "Import from Git", and provide below data to get a Pods with CrashLoopBackOff state
         Git Repo URL: https://github.com/sclorg/nodejs-ex.git
         Name: nodejs-ex-git
         Run command: star a wktw
      4. Navigate to /k8s/ns/<project name>/pods page, find the pod with CrashLoopBackOff status, and go to it details page -> Logs Tab
      5. Click the link of "Debug container"
      6. Check if the Debug container can be opened
      
      

      Actual results:

      6. Error message would be shown on page, user cannot open debug container via UI
         pods "nodejs-ex-git-6dd986d8bd-9h2wj-debug-tkqk2" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>

      Expected results:

      6. Normal user could use debug container without any error message

      Additional info:

      The debug container could be created for the normal user successfully via CommandLine
       $ oc debug <crashloopbackoff pod name> -n <project name>

              zherman Zac Herman
              rhn-support-xiyuzhao Xiyun Zhao
              Xiyun Zhao Xiyun Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: