Space Supporter role binding failure: cf cli v6 and v7.

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

When you are logged in with cf cli v6 or v7, using an user with Space Supporter role and try to bind an app to a service you see following error.
 

Error unmarshalling the following into a cloud controller error: You are not authorized to perform the requested action. See section 'Space Supporter Role in V2' https://docs.cloudfoundry.org/concepts/roles.html

Environment

Product Version: 2.12

Resolution

It's normal that it doesn't work with cf cli v6 since, as stated in the docs, the Space Supporter role is only available for the Cloud Controller (CC) V3 API and cf cli v6 uses V2 API.

• cf cli v7 CLI uses a combination of v2 and v3 endpoints at it happens that the bind-service endpoint is still used with CC v2 API, which explains why binding doesn't work with cf cli v7.
• cf cli v8 is the first version of the CLI that uses only v3 endpoints (with the exception of plugins).

Supporter Role is first available in TAS 2.12, since it was introduced in Cloud Controller API (CC API) Version 3.102.0. and TAS 2.12 contains CAPI 1.117.x that includes CC API 3.106.0. TAS 2.11 contains CAPI 1.109.x that includes CC API 3.99.0, hence it's not available in that TAS version.