Uploaded image for project: 'Knative Serving'
  1. Knative Serving
  2. SRVKS-142

Project admin cannot deploy knative resources

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 1.1.0
    • v0.6.0, v0.7.0, TP1
    • Operator
    • Serverless Sprint 168, Serverless Sprint 172

      After creating new user (non cluster-admin but project admin) and new project by him/her, the user cannot manipulate resources `services.serving.knative.dev`, `revisions.serving.knative.dev` and so on even within his/her namespace.

      Steps to reproduce

      1. Create auth and user to log in e.g htpasswd
      2. Login via basic user (=non cluster-admin) user and create a new project
      $ oc login -u knakayam
      $ oc new-project test
      3. Run oc get ksvc
      $ oc get ksvc
      Error from server (Forbidden): services.serving.knative.dev is forbidden: User "knakayam" cannot list resource "services" in API group "serving.knative.dev" in the namespace "test"

              rhn-support-knakayam Kenjiro Nakayama (Inactive)
              rhn-support-knakayam Kenjiro Nakayama (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: