crc: [BUG] "developer" user can't see operators on web console but can list them just fine on CLI

General information

OS: Linux
Hypervisor: KVM
Did you run crc setup before starting it (Yes/No)? Yes

CRC version

# Put `crc version` output here
crc version: 1.6.0+8ef676f
OpenShift version: 4.3.0 (embedded in binary)

Host Operating System

# Put the output of `cat /etc/os-release` in case of Linux
$ cat /etc/os-release 
NAME=Fedora
VERSION="31 (Thirty One)"
ID=fedora
VERSION_ID=31
VERSION_CODENAME=""
PLATFORM_ID="platform:f31"
PRETTY_NAME="Fedora 31 (Thirty One)"
ANSI_COLOR="0;34"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:31"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f31/system-administrators-guide/"
SUPPORT_URL="https://fedoraproject.org/wiki/Communicating_and_getting_help"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=31
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=31
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"

Steps to reproduce

Create a project using developer user oc new-project myproject
Install any operator from OperatorHub by logging into the web console as kubeadmin user
Log into webconsole as developer user and try to list operators by going to “Installed Operators”

Expected

developer user should be able to list the installed operators

Actual

developer user is unable to see the installed operators

About this issue

Original URL
State: closed
Created 4 years ago
Comments: 15 (11 by maintainers)

Commits related to this issue

Add necessary rolebindings for developer user to be able to list installed operators and view operator hub. To view installed operators access to resources from operators.coreos.com is needed, this p... — committed to anjannath/snc by anjannath 4 years ago

Most upvoted comments

This is still a valid usability issue for CRC.

gorkem on Jul 7, 2020

Thanks @anjannath, I can indeed reproduce with these additional steps! In my opinion, this is a bug in the web UI as it correctly shows that it’s listing the operators in the project project, but then displays a permission error. oc get csv works fine, so it probably should be able to show us “something”. I’d rather file this against the web console first, and revisit it if we get an explanation that this is not a bug on their side.

cfergeau on Mar 20, 2020