-
Bug
-
Resolution: Duplicate
-
Major
-
None
-
Logging 5.5.0
-
False
-
None
-
False
-
NEW
-
NEW
-
Log Storage - Sprint 224
Issue
Lok'is logging console gets error as the attached image when we tried to access it with non-admin user.
And the following error is recorded on our web browser's console.
It seems that non-admin user has no enough permission to access the console.
main-chunk-2367222d63b1979c8594.min.js:1 consoleFetch failed for url /api/kubernetes/api/v1/namespaces/logging-view/configmaps/logging-view-config a: configmaps "logging-view-config" is forbidden: User "test1" cannot get resource "configmaps" in API group "" in the namespace "logging-view" at https://console-openshift-console.apps.hawk2p7-tmp.cluster.sub.nec.test/static/main-chunk-2367222d63b1979c8594.min.js:1:163568
But, in EFK stack, non-admin user can access kibana.
So it's a regression from the EFK stack.
How to reproduce
Setup Loki stack and enable RedHat OpenShift Logging Console Plugin according to https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-loki.html#logging-loki-deploy_cluster-logging-loki .
Then access https://console-openshift-console.apps.<domain>/monitoring/logs with non-admin user.
Version
$ oc get clusterversion
NAME VERSION AVAILABLE PROGRESSING SINCE STATUS
version 4.11.0 True False 21d Cluster version is 4.11.0
$ oc get csv -n openshift-logging
NAME DISPLAY VERSION REPLACES PHASE
cluster-logging.5.5.0 Red Hat OpenShift Logging 5.5.0 Succeeded
loki-operator.5.5.0 Loki Operator 5.5.0 Succeeded
