[RBAC] Unable to create a DB cluster as DB version is not displayed, with specific RBAC policy
Description
STRs: 1. Install Everest v1.4-rc5 (I upgraded Everest from 1.3 to 1.4 rc-5, not sure if this matters) 2. Set the following RBAC policy for the user: p, role:test, namespaces, read, * p, role:test, database-engines, *, */percona-xtradb-cluster-operator p, role:test, database-clusters, *, */* p, role:test, database-cluster-backups, *,*/* p, role:test, database-cluster-restores, *, */* p, role:test, database-cluster-credentials, read, */* p, role:test, backup-storages, *, */* p, role:test, monitoring-instances, *, */* 3. Create a db cluster (Create database option is not visible on the ‘/databases’ api due to the policy applied (this is a separate bug), but you may try to create a db cluster by opening ‘http://127.0.0.1:8080/databases/new’). OR 4. Create a new db cluster with backups and then try to create a new db cluster from that backup
Actual Outcome: 1. No DB version is displayed, unable to create a db cluster. 2. While creating a new DB cluster from a backup, the DB version is not visible on the main section of the UI, but is visible on the database summary. And user is able to create a db cluster from a backup.
Expected Outcome: DB version and other fields visible on the UI as per the RBAC policy.
Environment
None
Attachments
2
Activity
Yusaf Awan
January 30, 2025 at 1:35 PM
Tested and verified.
Fábio Da Silva
January 23, 2025 at 11:12 PM
General FB w/RBAC fixes:
Diogo Recharte
January 21, 2025 at 11:35 AM
Waiting for the remaining tickets of everest-1.5.0-rbac-fixes to be ready, then a FB will be created with all of them.
High
STRs:
1. Install Everest v1.4-rc5 (I upgraded Everest from 1.3 to 1.4 rc-5, not sure if this matters)
2. Set the following RBAC policy for the user:
p, role:test, namespaces, read, *
p, role:test, database-engines, *, */percona-xtradb-cluster-operator
p, role:test, database-clusters, *, */*
p, role:test, database-cluster-backups, *,*/*
p, role:test, database-cluster-restores, *, */*
p, role:test, database-cluster-credentials, read, */*
p, role:test, backup-storages, *, */*
p, role:test, monitoring-instances, *, */*
3. Create a db cluster (Create database option is not visible on the ‘/databases’ api due to the policy applied (this is a separate bug), but you may try to create a db cluster by opening ‘http://127.0.0.1:8080/databases/new’).
OR
4. Create a new db cluster with backups and then try to create a new db cluster from that backup
Actual Outcome:
1. No DB version is displayed, unable to create a db cluster.
2. While creating a new DB cluster from a backup, the DB version is not visible on the main section of the UI, but is visible on the database summary. And user is able to create a db cluster from a backup.
Expected Outcome:
DB version and other fields visible on the UI as per the RBAC policy.