Red Hat Openshift Data Foundation, Multi-Cloud Gateway: Administrator cannot delete Users

Solution Verified - Updated -

Environment

  • Red Hat Openshift Data Foundation
    • Multi-Cloud Gateway Noobaa Operator

Issue

  • Administrator cannot delete users (neither S3 or Administrator users)

Resolution

  • access the Multi-Cloud Gateway Noobaa management console with skipping oauth from Red Hat Openshift Container Storage.
    https://noobaa-mgmt-openshift-storage.apps.example.com/fe?skip-oauth

  • use the noobaa-admin Account credentials to login

    • retrieving the required credentials via console, execute following

      $ oc -n openshift-storage get secret/noobaa-admin -ojsonpath='{ .data.email }' | base64 -d
$ oc -n openshift-storage get secret/noobaa-admin -ojsonpath='{ .data.password }' | base64 -d

  • navigate to the Accounts page

  • delete the Accounts necessary

Root Cause

  • The management console concept does not allow external accounts to delete other accounts but themself.

    $ grep -A2 canEditAccount frontend/src/app/utils/account-utils.js
export function canEditAccount(user, account) {
    return !user.isExternal || user == account;
}

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments