Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Handle ClusterClaims for which the user cannot view Deployments more elegantly #81

Closed
gurnben opened this issue Jul 29, 2021 · 0 comments
Assignees

Comments

@gurnben
Copy link
Member

gurnben commented Jul 29, 2021

Summary of Issue

When listing clusterclaims - my service account can see certain claims but cannot read the clusterdeployment objects. We should handle this case more elegantly, current behavior is:

gbuchana-mac:cm-cli gurnben$ /Users/gurnben/go/bin/cm get cc
CLUSTER_POOL_HOST CLUSTER_CLAIM              POWER_STATE HIBERNATE ID                                                                                                                                                                                                                                             
hivemind-b                                                         clusterdeployments.hive.openshift.io "canary-aws-4717-qxhrt" is forbidden: User "system:serviceaccount:clusterpool:gurnben" cannot get resource "clusterdeployments" in API group "hive.openshift.io" in the namespace "canary-aws-4717-qxhrt" 
hivemind-b                                                         clusterdeployments.hive.openshift.io "canary-aws-482-q6xtj" is forbidden: User "system:serviceaccount:clusterpool:gurnben" cannot get resource "clusterdeployments" in API group "hive.openshift.io" in the namespace "canary-aws-482-q6xtj"   
hivemind-b                                                         clusterdeployments.hive.openshift.io "canary-aws-482-xg6vm" is forbidden: User "system:serviceaccount:clusterpool:gurnben" cannot get resource "clusterdeployments" in API group "hive.openshift.io" in the namespace "canary-aws-482-xg6vm"   
hivemind-b                                                         clusterdeployments.hive.openshift.io "canary-gcp-482-89xmv" is forbidden: User "system:serviceaccount:clusterpool:gurnben" cannot get resource "clusterdeployments" in API group "hive.openshift.io" in the namespace "canary-gcp-482-89xmv"   
hivemind-b        gurnben-brew-registry-test Running               canary-aws-4719-6pgpx   

Desired behavior probably involves showing the CLUSTER_CLAIM name but not showing a power state or hibernate/ID (or show a permissions error there)

@itdove itdove self-assigned this Jul 30, 2021
@itdove itdove mentioned this issue Jul 30, 2021
@itdove itdove closed this as completed Jul 30, 2021
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants