Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-51149

CSR permission should not be a hard requirement for viewing Node tab

XMLWordPrintable

    • None
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, if you had permission to view nodes but not Certificate Signing Requests (CSR), you could not access the *Nodes list* page. With this release, permissions to view CSRs are no longer required to access the *Nodes list* page. (link:https://issues.redhat.com/browse/OCPBUGS-51149[*OCPBUGS-51149*])
      Show
      * Previously, if you had permission to view nodes but not Certificate Signing Requests (CSR), you could not access the *Nodes list* page. With this release, permissions to view CSRs are no longer required to access the *Nodes list* page. (link: https://issues.redhat.com/browse/OCPBUGS-51149 [* OCPBUGS-51149 *])
    • Bug Fix
    • Done

      This is a clone of issue OCPBUGS-50546. The following is the description of the original issue:
      —
      Description of problem:

      A user without CSR read permission can not view the Node page in Openshift console.

      Version-Release number of selected component (if applicable):

          4.16.30

      How reproducible:

          Always

      Steps to Reproduce:

          1. Create a 4.16.30 ROSA/OSD cluster
    2. Assign a user with dedicated-admins group. dedicated-admins has get node permission but without CSR related permissions.
    3. Open console access Compute - Node page

      Actual results:

      The page only shows an error, without other content:

certificatesigningrequests.certificates.k8s.io is forbidden: User "xxxx" cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope    

      Expected results:

      The user should still be able to view nodes.

      Additional info:

      OSD-28173 - card for SRE tracking.

              rawagner@redhat.com Rastislav Wagner
              openshift-crt-jira-prow OpenShift Prow Bot
              Xiyun Zhao Xiyun Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: