Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-16158

"Duplicate RoleBinding" leads to "Unsupported value" error


    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Major Major
    • None
    • 4.12.z
    • Management Console
    • None
    • Moderate
    • No
    • False
    • Hide



      This is a clone of issue OCPBUGS-15060. The following is the description of the original issue:

      Description of problem:

      When clicking on "Duplicate RoleBinding" in the OpenShift Container Platform Web Console, users are taken to a form where they can review the duplicated RoleBinding.
      When the RoleBinding has a ServiceAccount as a subject, clicking "Create" leads to the following error:
      An error occurred
      Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup".
      The root cause seems to be that the field "subjects[0].apiGroup" is set to "rbac.authorization.k8s.io" even for "kind: ServiceAccount" subjects. For "kind: ServiceAccount" subjects, this field is not necessary but the "namespace" field should be set instead.
      The functionality works as expected for User and Group subjects.

      Version-Release number of selected component (if applicable):

      OpenShift Container Platform 4.12.19

      How reproducible:


      Steps to Reproduce:

      1. In the OpenShift Container Platform Web Console, click on "User Management" => "Role Bindings"
      2. Search for a RoleBinding that has a "ServiceAccount" as the subject. On the far right, click on the dots and choose "Duplicate RoleBinding"
      3. Review the fields, set a new name for the duplicated RoleBinding, click "Create"

      Actual results:

      Duplicating fails with the following error message being shown:
      An error occurred
      Error "Unsupported value: "rbac.authorization.k8s.io": supported values: """ for field "subjects[0].apiGroup".

      Expected results:

      RoleBinding is duplicated without an error message

      Additional info:

      Reproduced with OpenShift Container Platform 4.12.18 and 4.12.19

            rh-ee-mziska Marek Ziska
            openshift-crt-jira-prow OpenShift Prow Bot
            YaDan Pei YaDan Pei
            0 Vote for this issue
            5 Start watching this issue