Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-50546

CSR permission should not be a hard requirement for viewing Node tab

XMLWordPrintable

      Description of problem:

      A user without CSR read permission can not view the Node page in Openshift console.

      Version-Release number of selected component (if applicable):

          4.16.30

      How reproducible:

          Always

      Steps to Reproduce:

          1. Create a 4.16.30 ROSA/OSD cluster
    2. Assign a user with dedicated-admins group. dedicated-admins has get node permission but without CSR related permissions.
    3. Open console access Compute - Node page

      Actual results:

      The page only shows an error, without other content:

certificatesigningrequests.certificates.k8s.io is forbidden: User "xxxx" cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope    

      Expected results:

      The user should still be able to view nodes.

      Additional info:

      OSD-28173 - card for SRE tracking.

              rawagner@redhat.com Rastislav Wagner
              siwu.openshift Siu Wa Wu
              YaDan Pei YaDan Pei
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: