Issue

• We want to use an imagestream (created in project a) in a separate project like you have documented here:
  https://access.redhat.com/documentation/en/openshift-enterprise/version-3.0/openshift-enterprise-30-developer-guide/chapter-11-image-pull-secrets
  Chapter 11.2.1.
  As mentioned the required role is "system:image-puller". I assigned this role to the user of an separate project but cant list the imagestreams.
  Quick scenario:
  IS created in project a
  Assigned role image-puller to serviceaccount and user of project b

Result:
Error from server: User "user project b" cannot list imagestreams in project "project a"

If I assign the admin role, I can list the IS.
Is there an another role required for that use case?