No admin access to groups with RHOAI sandbox
Closed this issue · 10 comments
Using an RHOAI sandbox as instructed by the course, in the Chapter 2 Lab we are instructed to create a group by logging in as an administrator and applying a group YAML file. However, our lone account, while it appears to have administrator access, is still restricted from listing or creating groups:
bash-4.4 ~ $ oc get groups
Error from server (Forbidden): groups.user.openshift.io is forbidden: User "rhn-gps-jdandrea" cannot list resource "groups" in API group "user.openshift.io" at the cluster scope
Is there another step we missed somewhere?
Side note: To get an S3 bucket (also part of this same section), I was directed to use step 1 of section 2.3.2 of the OpenShift AI Fraud Detection example. That seems to have worked, and I can get the minio route, login using credentials from the minio-root-user secret, and then create an S3 type access key, but the aforementioned RBAC issues remain.
Checking in. Still unable to create users and groups in a Developer Sandbox, which is what's recommended by Introduction to Red Hat OpenShift AI. It is required by the Assessment Lab: Working with Data Science Projects. How are others completing this?
@jdandrea - we initially suggested the sandbox to save some costs. Please fire up the alternate RHDP environment to do some of the labs that involve cluster admin functionality
@jramcast @stencell - propose we remove the sandbox option to avoid confusing people. Due to the organic growth of the hands on labs and ad-hoc functionality additions after the initial round of testing, it looks like sandbox won't work for us anymore.
@rsriniva yes basically if we need some sort of admin access in any exercise (e.g. for configuring user access), then the sandbox is not a valid option.
RHDP - ahaa, I will investigate. Thank you so much!
(Will leave this open so that the sandbox option can be removed from the text and associated with this.)
I see Hands On OpenShift Data Science in RHDP. I will try that next.
For this, Red Hat OpenShift Data Science v1.18.0-9 is offered. Unfortunately I don't see Data Science Projects in the left sidebar, so I can't create one.
@rsriniva Yes, please remove it if it doesn't work. Please add a recommended RHDP catalog item in it's place. It should ideally be something that is very generic - a vanilla OpenShift cluster with OpenShift AI installed. If you need to break that out into another issue to track, please do so.
@jdandrea - I am sorry you have had so many issues with the classroom. Please use this catalog item for the hands on labs for this course - https://demo.redhat.com/catalog?search=openshift+data+science&item=babylon-catalog-prod%2Fsandboxes-gpte.ocp4-workshop-rhods-base-aws.prod
The other courses ask you to launch a different RHDP catalog item. Please delete and stop classrooms when not in use to help manage capacity effectively. Thank you!
@rsriniva that's excellent, thank you so much!
I'm going to give it a whirl and report back.
Text has been updated on the home page to reflect the correct classroom. I am closing this issue. Please open a new issue for classroom issues still persist