Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Cluster Member cannot see clusternetworks #3300

Closed
futuretea opened this issue Dec 19, 2022 · 4 comments
Closed

[BUG] Cluster Member cannot see clusternetworks #3300

futuretea opened this issue Dec 19, 2022 · 4 comments
Assignees
Labels
area/multi-tenancy backport-needed/1.1.2 kind/bug Issues that are defects reported by users or that we know have reached a real release not-require/test-plan Skip to create a e2e automation test issue priority/0 Must be fixed in this release reproduce/always Reproducible 100% of the time severity/2 Function working but has a major issue w/o workaround (a major incident with significant impact)
Milestone

Comments

@futuretea
Copy link
Contributor

Describe the bug

To Reproduce
Steps to reproduce the behavior:

  1. Imported Harvester into Rancher under Virtualization Management.
  2. Created a new standard user into Rancher.
  3. Under Virtualization Management, edit the Harvester configuration and add the new users as Cluster Members.
    image
    image
  4. Using the new member users, log into the Rancher platform and open the Harvester management page.
  5. Under Networks >> VM Networks >> Create, there is a field called ¨Cluster Network¨. When the user opens the dropdown, there is no network available, and the message ¨Sorry, no matching options¨
    image

Expected behavior

Expect to see and select available cluster networks.

Support bundle

Environment

  • Harvester ISO version: v1.1
  • Underlying Infrastructure (e.g. Baremetal with Dell PowerEdge R630):

Additional context
Add any other context about the problem here.

@futuretea futuretea added kind/bug Issues that are defects reported by users or that we know have reached a real release reproduce/needed Reminder to add a reproduce label and to remove this one severity/needed Reminder to add a severity label and to remove this one reproduce/always Reproducible 100% of the time severity/2 Function working but has a major issue w/o workaround (a major incident with significant impact) area/multi-tenancy and removed reproduce/needed Reminder to add a reproduce label and to remove this one severity/needed Reminder to add a severity label and to remove this one labels Dec 19, 2022
@futuretea futuretea self-assigned this Dec 19, 2022
@guangbochen guangbochen added the priority/0 Must be fixed in this release label Dec 19, 2022
@guangbochen guangbochen added this to the v1.1.2 milestone Dec 19, 2022
@futuretea
Copy link
Contributor Author

futuretea commented Dec 20, 2022

Workaround: apply the patched ClusterRole harvester-authenticated after host reboot or harvester-system/harvester pod restart

kubectl apply -f ./harvester-authenticated.yaml

The content of harvester-authenticated.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: harvester-authenticated
rules:
- apiGroups:
  - harvesterhci.io
  resources:
  - settings
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - network.harvesterhci.io
  resources:
  - clusternetworks
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resourceNames:
  - harvester-public
  resources:
  - namespaces
  verbs:
  - get
  - watch

and change verbs of network-attachment-definitions to "*" by

kubectl edit clusterRole harvesterhci.io:edit

@futuretea futuretea added the not-require/test-plan Skip to create a e2e automation test issue label Dec 21, 2022
@harvesterhci-io-github-bot
Copy link

harvesterhci-io-github-bot commented Dec 21, 2022

Pre Ready-For-Testing Checklist

* [ ] If labeled: require/HEP Has the Harvester Enhancement Proposal PR submitted?
The HEP PR is at:

* [ ] Have the backend code been merged (harvester, harvester-installer, etc) (including backport-needed/*)?
The PR is at:

* [ ] Does the PR include deployment change (YAML/Chart)? If so, where are the PRs for both YAML file and Chart?
The PR for the YAML change is at:
The PR for the chart change is at:

* [ ] If labeled: area/ui Has the UI issue filed or ready to be merged?
The UI issue/PR is at:

* [ ] If labeled: require/doc, require/knowledge-base Has the necessary document PR submitted or merged?
The documentation/KB PR is at:

* [ ] If NOT labeled: not-require/test-plan Has the e2e test plan been merged? Have QAs agreed on the automation test case? If only test case skeleton w/o implementation, have you created an implementation issue?
- The automation skeleton PR is at:
- The automation test case PR is at:

* [ ] If the fix introduces the code for backward compatibility Has a separate issue been filed with the label release/obsolete-compatibility?
The compatibility issue is filed at:

@harvesterhci-io-github-bot

added backport-needed/1.1.2 issue: #3334.

@TachunLin TachunLin self-assigned this Jan 18, 2023
@TachunLin
Copy link

Verified fixed on master-14bbee2c-head (1/13) with Rancher v2.7.0. Close this issue.

Result

Create a normal user with cluster member role to access Harvester from virtualization management.
The user can see and select the clusternetworks item

vokoscreenNG-2023-01-18_19-52-56.mp4

Test Information

  • Test Environment: 1 nodes harvester on local kvm machine
  • Harvester version: master-14bbee2c-head (1/13)
  • Rancher version: v2.7.0

Verify Steps

Steps to reproduce the behavior:

  1. Imported Harvester into Rancher under Virtualization Management.
  2. Created a new standard user into Rancher.
  3. Under Virtualization Management, edit the Harvester configuration and add the new users as Cluster Members.
  4. Using the new member users, log into the Rancher platform and open the Harvester management page.
  5. Under Networks >> VM Networks >> Create, there is a field called ¨Cluster Network¨. When the user opens the dropdown, there is no network available, and the message ¨Sorry, no matching options¨

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/multi-tenancy backport-needed/1.1.2 kind/bug Issues that are defects reported by users or that we know have reached a real release not-require/test-plan Skip to create a e2e automation test issue priority/0 Must be fixed in this release reproduce/always Reproducible 100% of the time severity/2 Function working but has a major issue w/o workaround (a major incident with significant impact)
Projects
None yet
Development

No branches or pull requests

4 participants