-
Bug
-
Resolution: Done
-
Normal
-
None
-
4.12.0
-
None
-
Low
-
None
-
False
-
Description of problem:
grant cluster-monitoring-view role to user pm1
# oc adm policy add-cluster-role-to-user cluster-monitoring-view pm1
login the administrator UI with pm1 user, go to "Observe -> Targets" page, Monitor fields are blinking, debug the API, 403 error to list servicemonitors for user pm1
{ "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "servicemonitors.monitoring.coreos.com is forbidden: User \"pm1\" cannot list resource \"servicemonitors\" in API group \"monitoring.coreos.com\" at the cluster scope", "reason": "Forbidden", "details": { "group": "monitoring.coreos.com", "kind": "servicemonitors" }, "code": 403 }
Version-Release number of selected component (if applicable):
4.12.0-0.nightly-2022-11-08-002816
How reproducible:
always
Steps to Reproduce:
1. cluster-monitoring-view user, go to "Observe -> Targets" page 2. 3.
Actual results:
cluster-monitoring-view user can not list servicemonitors
Expected results:
no error
Additional info:
not sure if we allow cluster-monitoring-view user to list servicemonitors, we can close it if it's expected
- is depended on by
-
OCPBUGS-33519 Metrics Targets page shows "Cannot read properties of undefined (reading 'scrapePool')" error
- ON_QA
- links to