You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "MejdiB (via GitHub)" <gi...@apache.org> on 2023/06/23 14:02:33 UTC
[GitHub] [cloudstack] MejdiB opened a new issue, #7681: KCS in Advanced Zone with SG: Error Messag ein KCS Details View
MejdiB opened a new issue, #7681:
URL: https://github.com/apache/cloudstack/issues/7681
##### ISSUE TYPE
* Bug Report
##### COMPONENT NAME
~~~
Kubernetes, UI
~~~
##### CLOUDSTACK VERSION
~~~
4.17.2
~~~
##### Environment
~~~
Advanced Zone with Security Groups
~~~
##### SUMMARY
When users create Kubernetes Cluster, an error message appears when they open the KCS Details View:
`Acct[2d2ceae0-1a9d-48af-9a95-ca7f300138ac-acc1] -- Account {"id": 8, "name": "acc1", "uuid": "2d2ceae0-1a9d-48af-9a95-ca7f300138ac"} does not have permission to operate with resource`
The error message does not appear when users in Admin Role access the KCS.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "JoaoJandre (via GitHub)" <gi...@apache.org>.
JoaoJandre commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1881623673
@MejdiB this looks like a lack of configured permissions on the role. You should review the kubernetes' APIs permissions that you have added to the user role you created, some permissions might be missing.
As this doesn't seem like a bug, I'll be removing the 4.18.2.0 milestone
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] kiranchavala commented on issue #7681: CKS in Advanced Zone with SG: Error Message in CKS Details View
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1608780484
@MejdiB with what user role did you deploy k8s cluster?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] MejdiB commented on issue #7681: CKS in Advanced Zone with SG: Error Message in CKS Details View
Posted by "MejdiB (via GitHub)" <gi...@apache.org>.
MejdiB commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1609401888
@kiranchavala The errors occurs when I deploy with Role: `user`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "JoaoJandre (via GitHub)" <gi...@apache.org>.
JoaoJandre commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1883024823
@MejdiB I tried to reproduce the error and wasn't able to. I think that the error message should not be more informative, otherwise, we would start leaking information about what exact permissions a given user has.
However, there should be logs that allow the operators to figure out which permissions are missing. I'll re-add the issue to the 4.18.2.0 milestone, hopefully someone will be able to work on this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1884538502
@JoaoJandre @MejdiB
I have created a PR for it
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "MejdiB (via GitHub)" <gi...@apache.org>.
MejdiB commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1881780413
@JoaoJandre In the cloudstack-management logs, I cannot see which kind of permissions is missing with the output:
`INFO [c.c.a.ApiServer] (qtp989447607-52785:ctx-ab09fcfc ctx-2a192fbc) (logid:daf59e72) PermissionDenied: Acct[3aa78a55-ddf0-43ab-95da-2668b3f6afae-fgriehle] -- Account {"id": 4, "name": "fgriehle", "uuid": "3aa78a55-ddf0-43ab-95da-2668b3f6afae"} does not have permission to operate with resource on objs: []`
Furthermore, the only thing on the CKS details page that is not shown to the user are the internal names of the CKS instances, but all other information is present to the user as they are for the admin, so the error messages are indeed confusing and seems buggy
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-1883050934
@MejdiB
there are several API calls to management server when list the CKS cluster.
it would be good to share the list of apis.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland closed issue #7681: CKS in Advanced Zone with SG: Error Message in CKS Details View
URL: https://github.com/apache/cloudstack/issues/7681
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CKS in Advanced Zone with SG: Error Message in CKS Details View [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland commented on issue #7681:
URL: https://github.com/apache/cloudstack/issues/7681#issuecomment-2072302168
fixed in #8489
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org