| The mobile-developer does give some permission to the users, just seemingly not enough for the OpenShift web console to notice. Ali Ok would you mind taking this issue? I'm not sure what the console requires for it to be useful. We'll at least need to give users access to Routes in this project so that they can find the MDC url, but I'm not sure if that's enough for the web console to get past the error. Here's some output from within that project:
$ oc get all
No resources found.
Error from server (Forbidden): pods is forbidden: User "evals11" cannot list pods in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): replicationcontrollers is forbidden: User "evals11" cannot list replicationcontrollers in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): services is forbidden: User "evals11" cannot list services in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): daemonsets.apps is forbidden: User "evals11" cannot list daemonsets.apps in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): deployments.apps is forbidden: User "evals11" cannot list deployments.apps in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): replicasets.apps is forbidden: User "evals11" cannot list replicasets.apps in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): statefulsets.apps is forbidden: User "evals11" cannot list statefulsets.apps in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): horizontalpodautoscalers.autoscaling is forbidden: User "evals11" cannot list horizontalpodautoscalers.autoscaling in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): jobs.batch is forbidden: User "evals11" cannot list jobs.batch in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): cronjobs.batch is forbidden: User "evals11" cannot list cronjobs.batch in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): deploymentconfigs.apps.openshift.io is forbidden: User "evals11" cannot list deploymentconfigs.apps.openshift.io in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): buildconfigs.build.openshift.io is forbidden: User "evals11" cannot list buildconfigs.build.openshift.io in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): builds.build.openshift.io is forbidden: User "evals11" cannot list builds.build.openshift.io in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): imagestreams.image.openshift.io is forbidden: User "evals11" cannot list imagestreams.image.openshift.io in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): routes.route.openshift.io is forbidden: User "evals11" cannot list routes.route.openshift.io in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): installplans.operators.coreos.com is forbidden: User "evals11" cannot list installplans.operators.coreos.com in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): catalogsources.operators.coreos.com is forbidden: User "evals11" cannot list catalogsources.operators.coreos.com in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): subscriptions.operators.coreos.com is forbidden: User "evals11" cannot list subscriptions.operators.coreos.com in the namespace "mobile-developer-console": no RBAC policy matched
Error from server (Forbidden): clusterserviceversions.operators.coreos.com is forbidden: User "evals11" cannot list clusterserviceversions.operators.coreos.com in the namespace "mobile-developer-console": no RBAC policy matched
$ oc get cm
NAME DATA AGE
aliok-rocks-data-sync-binding 2 15h
aliok-rocks-security 1 11h
camila-data-sync-binding 2 12h
camila-security 1 12h
camila3-security 1 11h
hello.world-security 1 15h
mobile-developer-console-operator-lock 0 1d
mobilemobilemobilemobilemobile-security 1 12h
mziccard1-data-sync-binding 2 13h
mziccard1-security 1 13h
org.aerogear.ionic.showcase-data-sync-binding 2 10h
org.aerogear.ionic.showcase-security 1 11h
summers-data-sync-binding 2 3h
summers-security 1 3h
vsazel-test3-data-sync-binding 2 12h
vsazel-test3-security 1 12h
wtr-walkwhatever-9-data-sync-binding 2 6h
i don't think AEROGEAR-9690 is directly related, but could you take a look over that issue also, as you might have some ideas around it (or at least it might be good to think about them together). |