Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-30889

No access to list pipelines.tekton.dev prevents from using Delete application form

XMLWordPrintable

    • No
    • ODC Sprint 3258, ODC Sprint 3260
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • On delete application, added the check to see if the user have permission to list the Pipeline resources, if there, then only pipeline resources will be listed to delete.

      Description of problem:
      Trying to delete the application depleyed using Serveless, with a user with limited permission, caused the "Delete application" form to complain:

      pipelines.tekton.dev is forbidden: User "uitesting" cannot list resource "pipelines" in API group "tekton.dev" in the namespace "test-cluster-local"

      This prevents the deletion. Worth adding that the cluster doesn't have Pipelines installed.
      See the sceenshot: https://drive.google.com/file/d/1bsQ_NFO_grj_fE-UInUJXum39bPsHJh1

      Version-Release number of selected component (if applicable):

      4.15.0
          

      How reproducible:

      Always
          

      Steps to Reproduce:

          1. Create a limited user
          2. Deploy some application, not nececcerly a Serverless one
          3. Try to delete the "application" using the Dev Console
          

      Actual results:

      And unrevelant error is shown, preventing the deletetion: pipelines.tekton.dev is forbidden: User "uitesting" cannot list resource "pipelines" in API group "tekton.dev" in the namespace "test-cluster-local"
          

      Expected results:

      The app should be removed, with everything that's labelled with it.
          

              rh-ee-lprabhu Lokananda Prabhu
              krzysztofsuszynski Chris Suszynski
              Sanket Pathak Sanket Pathak
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: