{"action":"opened","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/14168","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/14168/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/14168/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/14168/events","html_url":"https://github.com/openshift/origin/issues/14168","id":228321997,"number":14168,"title":"Error from server (Forbidden): error when creating \"demo/kubernetes/rook-operator.yaml\": ","user":{"login":"debianmaster","id":1439169,"avatar_url":"https://avatars0.githubusercontent.com/u/1439169?v=3","gravatar_id":"","url":"https://api.github.com/users/debianmaster","html_url":"https://github.com/debianmaster","followers_url":"https://api.github.com/users/debianmaster/followers","following_url":"https://api.github.com/users/debianmaster/following{/other_user}","gists_url":"https://api.github.com/users/debianmaster/gists{/gist_id}","starred_url":"https://api.github.com/users/debianmaster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/debianmaster/subscriptions","organizations_url":"https://api.github.com/users/debianmaster/orgs","repos_url":"https://api.github.com/users/debianmaster/repos","events_url":"https://api.github.com/users/debianmaster/events{/privacy}","received_events_url":"https://api.github.com/users/debianmaster/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-05-12T15:10:41Z","updated_at":"2017-05-12T15:10:41Z","closed_at":null,"body":"I'm trying to create a rook.io storage cluster on openshift `master` branch version as of today.\r\nAnd seeing following error\r\n\r\n##### Version\r\n```sh\r\noc v3.6.0-alpha.1+f24a57f-496\r\nkubernetes v1.6.1+5115d708d7\r\nfeatures: Basic-Auth GSSAPI Kerberos SPNEGO\r\n\r\nServer https://34.209.8.118.nip.io:8443\r\nopenshift v3.6.0-alpha.1+f24a57f-496\r\nkubernetes v1.6.1+5115d708d7\r\n```\r\n##### Steps To Reproduce\r\n```sh\r\ngit clone https://github.com/rook/rook.git\r\ncd rook\r\noc new-project rook\r\noc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:rook:rook-api\r\noc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:default:rook-operator\r\noc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:rook:default\r\noc adm policy add-scc-to-user anyuid -z default -n rook\r\noc adm policy add-scc-to-user privileged -z default -n rook\r\noc delete -f demo/kubernetes/rook-operator.yaml\r\n\r\n```\r\n##### Current Result\r\n```sh\r\nError from server (Forbidden): error when creating \"demo/kubernetes/rook-operator.yaml\": clusterroles.rbac.authorization.k8s.io \"rook-operator\" is forbidden: attempt to grant extra privileges: [{[get] [] [namespaces] [] []} {[list] [] [namespaces] [] []} {[watch] [] [namespaces] [] []} {[create] [] [namespaces] [] []} {[update] [] [namespaces] [] []} {[get] [] [serviceaccounts] [] []} {[list] [] [serviceaccounts] [] []} {[watch] [] [serviceaccounts] [] []} {[create] [] [serviceaccounts] [] []} {[update] [] [serviceaccounts] [] []} {[get] [] [secrets] [] []} {[list] [] [secrets] [] []} {[watch] [] [secrets] [] []} {[create] [] [secrets] [] []} {[update] [] [secrets] [] []} {[get] [] [pods] [] []} {[list] [] [pods] [] []} {[watch] [] [pods] [] []} {[create] [] [pods] [] []} {[update] [] [pods] [] []} {[get] [] [services] [] []} {[list] [] [services] [] []} {[watch] [] [services] [] []} {[create] [] [services] [] []} {[update] [] [services] [] []} {[get] [] [nodes] [] []} {[list] [] [nodes] [] []} {[watch] [] [nodes] [] []} {[create] [] [nodes] [] []} {[update] [] [nodes] [] []} {[get] [] [configmaps] [] []} {[list] [] [configmaps] [] []} {[watch] [] [configmaps] [] []} {[create] [] [configmaps] [] []} {[update] [] [configmaps] [] []} {[get] [] [events] [] []} {[list] [] [events] [] []} {[watch] [] [events] [] []} {[create] [] [events] [] []} {[update] [] [events] [] []} {[get] [] [persistentvolumes] [] []} {[list] [] [persistentvolumes] [] []} {[watch] [] [persistentvolumes] [] []} {[create] [] [persistentvolumes] [] []} {[update] [] [persistentvolumes] [] []} {[get] [] [persistentvolumeclaims] [] []} {[list] [] [persistentvolumeclaims] [] []} {[watch] [] [persistentvolumeclaims] [] []} {[create] [] [persistentvolumeclaims] [] []} {[update] [] [persistentvolumeclaims] [] []} {[get] [extensions] [thirdpartyresources] [] []} {[list] [extensions] [thirdpartyresources] [] []} {[watch] [extensions] [thirdpartyresources] [] []} {[create] [extensions] [thirdpartyresources] [] []} {[get] [extensions] [deployments] [] []} {[list] [extensions] [deployments] [] []} {[watch] [extensions] [deployments] [] []} {[create] [extensions] [deployments] [] []} {[get] [extensions] [daemonsets] [] []} {[list] [extensions] [daemonsets] [] []} {[watch] [extensions] [daemonsets] [] []} {[create] [extensions] [daemonsets] [] []} {[get] [extensions] [replicasets] [] []} {[list] [extensions] [replicasets] [] []} {[watch] [extensions] [replicasets] [] []} {[create] [extensions] [replicasets] [] []} {[get] [rbac.authorization.k8s.io] [clusterroles] [] []} {[list] [rbac.authorization.k8s.io] [clusterroles] [] []} {[watch] [rbac.authorization.k8s.io] [clusterroles] [] []} {[create] [rbac.authorization.k8s.io] [clusterroles] [] []} {[update] [rbac.authorization.k8s.io] [clusterroles] [] []} {[get] [rbac.authorization.k8s.io] [clusterrolebindings] [] []} {[list] [rbac.authorization.k8s.io] [clusterrolebindings] [] []} {[watch] [rbac.authorization.k8s.io] [clusterrolebindings] [] []} {[create] [rbac.authorization.k8s.io] [clusterrolebindings] [] []} {[update] [rbac.authorization.k8s.io] [clusterrolebindings] [] []} {[get] [storage.k8s.io] [storageclasses] [] []} {[list] [storage.k8s.io] [storageclasses] [] []} {[watch] [storage.k8s.io] [storageclasses] [] []} {[*] [rook.io] [*] [] []}] user=&{system:admin  [system:cluster-admins system:authenticated] map[]} ownerrules=[{[create] [authorization.k8s.io] [selfsubjectaccessreviews] [] []} {[get] [] [] [] [/api /api/* /apis /apis/* /healthz /swaggerapi /swaggerapi/* /version]}] ruleResolutionErrors=[]\r\n```\r\n##### Expected Result\r\noperation should succeed and a pod should be created.\r\n\r\n\r\n"}}
{"actor":{"display_login":"debianmaster"}}