Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-39735

Fix RBAC role wizard creation failure in ephemeral environment

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • None
    • Quality / Stability / Reliability
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • Unset
    • None
    • Plat-Ex UI Sprint 38

      When the second step (Add permissions tab) of the RBAC Role Wizard is entered, the UI breaks, preventing further progress.

       

      Reproducer

      1. Deploy RBAC with bonfire:

      example with host inventory service:

       

      bonfire deploy host-inventory -F true -p host-inventory/RBAC_V2_FORCE_ORG_ADMIN=true -p host-inventory/CONSUMER_MQ_BROKER=rbac-kafka-kafka-bootstrap:9092  --set-template-ref host-inventory=34aec254d38cef3c20096dd7561ac4690e5b2437  -p rbac/V2_APIS_ENABLED=True -p rbac/V2_READ_ONLY_API_MODE=False -p rbac/V2_BOOTSTRAP_TENANT=True -p rbac/REPLICATION_TO_RELATION_ENABLED=True  -p rbac/BYPASS_BOP_VERIFICATION=True -p rbac/KAFKA_ENABLED=False -p rbac/NOTIFICATONS_ENABLED=False -p rbac/NOTIFICATIONS_RH_ENABLED=False --set-image-tag quay.io/redhat-services-prod/hcc-accessmanagement-tenant/insights-rbac=latest  -p host-inventory/BYPASS_RBAC=false 

      2. Navigate to

       

      Identity & Access Management -> User Access -> Roles 

      3. Click on Create Role and populate name and click ok on NEXT

      -> in this step error occurs: user is navigated back first step or it ends with "sentry error"

      See more on recording:

      https://drive.google.com/file/d/1kHSeLL_2Lt9bzfkMNdEPLuvYz1IEsZZI/view?usp=sharing

       

      Issue 

      After investigation with khala-1 , we found that there are calls to other services to cost and host based inventory and when those services are not deployed(its /resource-types requests returns 4xx), mentioned error is occurring.

      When requests returns 5xx, user can continue with wizard.

       

      Fix

      This requires to deploy all related services  which complicated deploy process, it would be good if wizard will work without cost or host based inventory - in this case related permissions will not be listed.

       

      My use case

      I want to create role with different permission than cost related ones.

       

              rforina Riccardo Forina
              lpichler@redhat.com Libor Pichler
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: