Uploaded image for project: 'Cluster Observability Operator'
  1. Cluster Observability Operator
  2. COO-288

DevConsole metrics forbidden when login as general user

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 0.4.0
    • None
    • korrel8r
    • False
    • Hide

      None

      Show
      None
    • False
    • None

      Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

      https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

      Same query can return value using observe->metrics-custom Query

      Step to reproduce:

      1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

      2. create projects, alert and assign roles o general user.

      echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
oc -n ${user_namespace} policy add-role-to-user view ${user_name}
oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view  ${user_name}

      3. View Logs, metrics, alert in dev-console as general user
      Result: The general user can view logs, alert and metrics

      4. Click the metrics link in log record.

      Actual result:

      Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

        1. create-infra-app-logs-alerts.sh
          3 kB
        2. screenshot-2.png
          screenshot-2.png
          23 kB
        3. screenshot-3.png
          screenshot-3.png
          70 kB
        4. screenshot-4.png
          screenshot-4.png
          22 kB

            [COO-288] DevConsole metrics forbidden when login as general user

            Errata Tool added a comment -

            Since the problem described in this issue should be resolved in a recent advisory, it has been closed.

            For information on the advisory (Cluster Observability Operator 0.4.0), and where to find the updated files, follow the link below.

            If the solution does not work for you, open a new bug report.
            https://access.redhat.com/errata/RHEA-2024:6699

            Errata Tool added a comment - Since the problem described in this issue should be resolved in a recent advisory, it has been closed. For information on the advisory (Cluster Observability Operator 0.4.0), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2024:6699

            Anping Li added a comment -

            The generic can display the metrics from Logging-metrics in 0.4.0.

             

            Anping Li added a comment - The generic can display the metrics from Logging-metrics in 0.4.0.  
            Anping Li made changes -
            Resolution New: Done [ 1 ]
            Status Original: On QA [ 14445 ] New: Closed [ 6 ]
            Jan Fajerski made changes -
            Fix Version/s New: 0.4.0 [ 12430999 ]
            Fix Version/s Original: 0.4.0 RC [ 12429952 ]
            Errata Tool made changes -
            Remote Link New: This issue links to "RHEA-2024:138050 (Web Link)" [ 1742091 ]
            Hongyan Li made changes -
            Fix Version/s New: 0.4.0 RC [ 12429952 ]
            Fix Version/s Original: 0.4.0 [ 12430999 ]
            Hongyan Li made changes -
            Fix Version/s New: 0.4.0 [ 12430999 ]
            Fix Version/s Original: 0.3.2 [ 12431529 ]
            Anping Li made changes -
            Labels New: Verified

            Anping Li added a comment -

            Verified on 4.16 using the PR https://github.com/openshift/logging-view-plugin/pull/211
            Verified on 4.17 using the PR https://github.com/openshift/logging-view-plugin/pull/211 and openshift/monitoring-plugin#164

            Anping Li added a comment - Verified on 4.16 using the PR https://github.com/openshift/logging-view-plugin/pull/211 Verified on 4.17 using the PR https://github.com/openshift/logging-view-plugin/pull/211 and openshift/monitoring-plugin#164
            Anping Li made changes -
            Status Original: Code Review [ 14434 ] New: On QA [ 14445 ]
            DPTP Bot made changes -
            Remote Link New: This issue links to "openshift/logging-view-plugin#212: [release-6.0] COO-288: make correlation links aware of dev perspective (Web Link)" [ 1734832 ]
            Gabriel Bernal made changes -
            Status Original: In Progress [ 10018 ] New: Code Review [ 14434 ]
            DPTP Bot made changes -
            Remote Link New: This issue links to "openshift/logging-view-plugin#211: COO-288: make correlation links aware of dev perspective (Web Link)" [ 1732809 ]
            Gabriel Bernal made changes -
            Status Original: To Do [ 10020 ] New: In Progress [ 10018 ]
            Gabriel Bernal made changes -
            Assignee New: Gabriel Bernal [ gbernal@redhat.com ]
            Anping Li made changes -
            Attachment Original: screenshot-1.png [ 13246474 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!             		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            h2. Step to reproduce:

            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.


            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!
            Anping Li made changes -
            Attachment New: screenshot-4.png [ 13246683 ]
            Anping Li made changes -
            Attachment New: screenshot-3.png [ 13246682 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.


            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return {namespace="app2-testuser-1",pod="centos-logtest-p4vtb"}


            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return {namespace="app2-testuser-1",pod="centos-logtest-p4vtb"}


            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Attachment New: screenshot-2.png [ 13246681 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Jan Fajerski made changes -
            Fix Version/s New: 0.3.2 [ 12431529 ]
            Jan Fajerski made changes -
            Priority Original: Undefined [ 10300 ] New: Blocker [ 1 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1) deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.
            1) create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            2) View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics.
            3) Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Attachment New: create-infra-app-logs-alerts.sh [ 13246676 ]
            Anping Li made changes -
            Attachment Original: Screenshot from 2024-08-14 19-39-57.png [ 13246051 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Step to reproduce:
            1) create project and assign roles o


            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}             		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1) deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.
            1) create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            2) View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics.
            3) Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Step to reproduce:
            1) create project and assign roles o


            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            Hongyan Li added a comment - - edited

            rhn-support-anli 
             According to the following doc, have you tried assign role cluster-monitoring-view to the genernal user?
            https://docs.openshift.com/container-platform/4.16/observability/monitoring/managing-metrics.html#querying-metrics-for-us[…]veloper_managing-metrics

            Hongyan Li added a comment - - edited rhn-support-anli     According to the following doc, have you tried assign role cluster-monitoring-view to the genernal user? https://docs.openshift.com/container-platform/4.16/observability/monitoring/managing-metrics.html#querying-metrics-for-us[…]veloper_managing-metrics
            Anping Li made changes -
            Summary Original: metrics forbidden when login as general user New: DevConsole metrics forbidden when login as general user
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics



            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Anping Li made changes -
            Attachment New: screenshot-1.png [ 13246474 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics



            Anping Li made changes -
            Description Original: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            		New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            Anping Li made changes -
            Summary Original: metrics forbidden when login as generic user New: metrics forbidden when login as general user
            Anping Li made changes -
            Attachment New: Screenshot from 2024-08-14 19-39-57.png [ 13246051 ]
            Anping Li made changes -
            Description Original: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            		New: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            Anping Li made changes -
            Component/s New: korrel8r [ 12399489 ]
            Anping Li created issue -

              gbernal@redhat.com Gabriel Bernal
              rhn-support-anli Anping Li
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: