Uploaded image for project: 'Cluster Observability Operator'
  1. Cluster Observability Operator
  2. COO-288

DevConsole metrics forbidden when login as general user

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 0.4.0
    • None
    • korrel8r
    • False
    • Hide

      None

      Show
      None
    • False
    • None

      Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

      https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

      Same query can return value using observe->metrics-custom Query

      Step to reproduce:

      1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

      2. create projects, alert and assign roles o general user.

      echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
      oc -n ${user_namespace} policy add-role-to-user view ${user_name}
      oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
      oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
      oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view  ${user_name}
      

      3. View Logs, metrics, alert in dev-console as general user
      Result: The general user can view logs, alert and metrics

      4. Click the metrics link in log record.

      Actual result:

      Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

        1. create-infra-app-logs-alerts.sh
          3 kB
        2. screenshot-2.png
          screenshot-2.png
          23 kB
        3. screenshot-3.png
          screenshot-3.png
          70 kB
        4. screenshot-4.png
          screenshot-4.png
          22 kB

            [COO-288] DevConsole metrics forbidden when login as general user

            Anping Li created issue -
            Anping Li made changes -
            Component/s New: korrel8r [ 12399489 ]
            Anping Li made changes -
            Description Original: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            New: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            Anping Li made changes -
            Attachment New: Screenshot from 2024-08-14 19-39-57.png [ 13246051 ]
            Anping Li made changes -
            Summary Original: metrics forbidden when login as generic user New: metrics forbidden when login as general user
            Anping Li made changes -
            Description Original: Log in Dev console as generic user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics


            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics



            Anping Li made changes -
            Attachment New: screenshot-1.png [ 13246474 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics



            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Anping Li made changes -
            Summary Original: metrics forbidden when login as general user New: DevConsole metrics forbidden when login as general user
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Step to reproduce:
            1) create project and assign roles o


            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!



            Step to reproduce:
            1) create project and assign roles o


            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1) deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.
            1) create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            2) View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics.
            3) Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Attachment Original: Screenshot from 2024-08-14 19-39-57.png [ 13246051 ]
            Anping Li made changes -
            Attachment New: create-infra-app-logs-alerts.sh [ 13246676 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1) deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.
            1) create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            2) View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics.
            3) Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Jan Fajerski made changes -
            Priority Original: Undefined [ 10300 ] New: Blocker [ 1 ]
            Jan Fajerski made changes -
            Fix Version/s New: 0.3.2 [ 12431529 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Attachment New: screenshot-2.png [ 13246681 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D


             !screenshot-1.png|thumbnail!

            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return {namespace="app2-testuser-1",pod="centos-logtest-p4vtb"}


            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return {namespace="app2-testuser-1",pod="centos-logtest-p4vtb"}


            Step to reproduce:
            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}

            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

            Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.


            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            Anping Li made changes -
            Attachment New: screenshot-3.png [ 13246682 ]
            Anping Li made changes -
            Attachment New: screenshot-4.png [ 13246683 ]
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D

             !screenshot-1.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.


            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!
            Anping Li made changes -
            Description Original: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            Step to reproduce:
            h3. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            h3. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            h3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            h3. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!
            New: Log in Dev console as a general user , Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

            https://console-openshift-console.apps.anlimag16.qemag.azure.devcluster.openshift.com/monitoring/query-browser?query0=%7Bnamespace%3D%22app2-testuser-1%22%2Cpod%3D%22centos-logtest-p4vtb%22%7D
             !screenshot-4.png|thumbnail!

            Same query can return value using observe->metrics-custom Query
             !screenshot-2.png|thumbnail!


            h2. Step to reproduce:

            1. deploy coo and enable LoggingUI Plugin TroubeShootPannel Plugin.

            2. create projects, alert and assign roles o general user.

            {code:java}
            echo "# grant ${user_name} view logs/alerts to ${user_namespace}"
            oc -n ${user_namespace} policy add-role-to-user view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-logging-application-view ${user_name}
            oc -n ${user_namespace} policy add-role-to-user monitoring-rules-edit ${user_name}
            oc -n ${user_namespace} policy add-role-to-user cluster-monitoring-view ${user_name}
            {code}


            3. View Logs, metrics, alert in dev-console as general user
                Result: The general user can view logs, alert and metrics

             !screenshot-2.png|thumbnail!

            4. Click the metrics link in log record.

             !screenshot-3.png|thumbnail!

            h2. Actual result:
            Metrics are forbidden when navigated from Dev-Console->observe->logs->metrics

             !screenshot-4.png|thumbnail!
            Anping Li made changes -
            Attachment Original: screenshot-1.png [ 13246474 ]
            Gabriel Bernal made changes -
            Assignee New: Gabriel Bernal [ gbernal@redhat.com ]
            Gabriel Bernal made changes -
            Status Original: To Do [ 10020 ] New: In Progress [ 10018 ]
            DPTP Bot made changes -
            Remote Link New: This issue links to "openshift/logging-view-plugin#211: COO-288: make correlation links aware of dev perspective (Web Link)" [ 1732809 ]
            Gabriel Bernal made changes -
            Status Original: In Progress [ 10018 ] New: Code Review [ 14434 ]
            DPTP Bot made changes -
            Remote Link New: This issue links to "openshift/logging-view-plugin#212: [release-6.0] COO-288: make correlation links aware of dev perspective (Web Link)" [ 1734832 ]
            Anping Li made changes -
            Status Original: Code Review [ 14434 ] New: On QA [ 14445 ]
            Anping Li made changes -
            Labels New: Verified
            Hongyan Li made changes -
            Fix Version/s New: 0.4.0 [ 12430999 ]
            Fix Version/s Original: 0.3.2 [ 12431529 ]
            Hongyan Li made changes -
            Fix Version/s New: 0.4.0 RC [ 12429952 ]
            Fix Version/s Original: 0.4.0 [ 12430999 ]
            Errata Tool made changes -
            Remote Link New: This issue links to "RHEA-2024:138050 (Web Link)" [ 1742091 ]
            Jan Fajerski made changes -
            Fix Version/s New: 0.4.0 [ 12430999 ]
            Fix Version/s Original: 0.4.0 RC [ 12429952 ]
            Anping Li made changes -
            Resolution New: Done [ 1 ]
            Status Original: On QA [ 14445 ] New: Closed [ 6 ]

              gbernal@redhat.com Gabriel Bernal
              rhn-support-anli Anping Li
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: