Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-51149

CSR permission should not be a hard requirement for viewing Node tab

XMLWordPrintable

      This is a clone of issue OCPBUGS-50546. The following is the description of the original issue:
      —
      Description of problem:

      A user without CSR read permission can not view the Node page in Openshift console.

      Version-Release number of selected component (if applicable):

          4.16.30

      How reproducible:

          Always

      Steps to Reproduce:

          1. Create a 4.16.30 ROSA/OSD cluster
    2. Assign a user with dedicated-admins group. dedicated-admins has get node permission but without CSR related permissions.
    3. Open console access Compute - Node page

      Actual results:

      The page only shows an error, without other content:

certificatesigningrequests.certificates.k8s.io is forbidden: User "xxxx" cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope    

      Expected results:

      The user should still be able to view nodes.

      Additional info:

      OSD-28173 - card for SRE tracking.

              jhadvig@redhat.com Jakub Hadvig
              openshift-crt-jira-prow OpenShift Prow Bot
              YaDan Pei YaDan Pei
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: