-
Bug
-
Resolution: Done
-
Blocker
-
v0.6.0, v0.7.0, TP1
-
Serverless Sprint 168, Serverless Sprint 172
After creating new user (non cluster-admin but project admin) and new project by him/her, the user cannot manipulate resources `services.serving.knative.dev`, `revisions.serving.knative.dev` and so on even within his/her namespace.
Steps to reproduce
1. Create auth and user to log in e.g htpasswd
2. Login via basic user (=non cluster-admin) user and create a new project
$ oc login -u knakayam
$ oc new-project test
3. Run oc get ksvc
$ oc get ksvc Error from server (Forbidden): services.serving.knative.dev is forbidden: User "knakayam" cannot list resource "services" in API group "serving.knative.dev" in the namespace "test"