[EnMasse] Openshift / Minishift user permissions

[Lohmann Carsten (INST/ECS4)]

Hi Ulf,

> What version of the oc command line tool?

thanks, that pointed to the problem. I still had an "oc v1.5.0+031cbe4" in the PATH
(and I hadn't used "eval $(minishift oc-env)").

Now I'm using the "oc" downloaded by minishift (oc v3.7.2+282e43f).

Best regards
Carsten



> -----Ursprüngliche Nachricht-----
> Von: Ulf Lilleengen [mailto:lulf at redhat.com]
> Gesendet: Mittwoch, 11. April 2018 15:41
> An: Lohmann Carsten (INST/ECS4) <Carsten.Lohmann at bosch-si.com>;
> enmasse at redhat.com
> Betreff: Re: [EnMasse] Openshift / Minishift user permissions
> 
> On 04/11/2018 03:18 PM, Lohmann Carsten (INST/ECS4) wrote:
> > Hi,
> >
> > I've been doing some tests with EnMasse on Minishift and have
> > encountered a problem concerning permissions.
> >
> 
> 
> The errors you are seeing below are unknown to me. The best way to add cluster-
> admin to developer is to login as system:admin.
> 
> oc login -u system:admin
> 
> Then
> 
> oc adm policy add-cluster-role-to-user cluster-admin developer
> 
> Which version of minishift/openshift are you using? What version of the oc
> command line tool?
> 
> Did you follow
> http://enmasse.io/documentation/master/#installing-openshift ?
> 
> 
> HTH,
> 
> Ulf
> 
> > I guessed, I had to put the "developer" user into the "cluster-admin"
> > group in order to prevent this error:
> >
> > ----
> >
> > $ oc whoami
> >
> > developer
> >
> > $ oc new-project enmasse
> >
> > Now using project "enmasse" on server "https://192.168.42.240:8443".
> >
> > $ oc policy add-role-to-user view system:serviceaccount:enmasse:default
> >
> > Error from server (Forbidden): the server does not allow access to the
> > requested resource (get policyBindings :default)
> > > ----
> >
> > But
> >
> > oc adm policy --as system:admin add-cluster-role-to-user cluster-admin
> > developer
> >
> > fails with
> >
> > Error from server (NotFound): the server could not find the requested
> > resource
> >
> > Log errors:
> >
> > I0411 15:10:49.493532   38470 round_trippers.go:318] GET
> > https://192.168.42.214:8443/oapi/v1/clusterpolicybindings/:default 404
> > Not Found in 29 milliseconds
> >
> > I0411 15:10:49.495210   38470 round_trippers.go:318] GET
> > https://192.168.42.214:8443/oapi/v1/clusterpolicybindings 404 Not Found
> > in 1 milliseconds
> >
> > So, it seems the clusterPolicy, policyBindings, and
> > clusterPolicyBindings resources are not there anymore in this OpenShift
> > version
> >
> > (as mentioned here:
> > https://github.com/openshift/openshift-docs/issues/5208).
> >
> > What would be the way to solve this?
> >
> > Best regards
> >
> > *Carsten Lohmann
> > *
> > (INST/ECS4)
> > Bosch Software Innovations GmbH | Ullsteinstr. 128 | 12109 Berlin |
> > GERMANY| www.bosch-si.com <http://www.bosch-si.com>
> >
> > Sitz: Berlin, Registergericht: Amtsgericht Charlottenburg; HRB 148411 B
> > Aufsichtsratsvorsitzender: Dr.-Ing. Thorsten Lücke; Geschäftsführung:
> > Dr. Stefan Ferber, Michael Hahn
> >
> >
> >
> >
> >
> > _______________________________________________
> > enmasse mailing list
> > enmasse at redhat.com
> > https://www.redhat.com/mailman/listinfo/enmasse
> >
> 
> --
> Ulf