Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-8482

Allow project-level access to Metrics tab in Developer View in RHOCP 4 web console

XMLWordPrintable

    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request

      Enable project-level access to Observe -> Metrics tab in Developer View without requiring cluster-admin or cluster-wide monitoring permissions.

      2. What is the nature and description of the request?

      Currently, the Metrics page under Developer View → Observe → Metrics in the OpenShift web console requires users to have the cluster-monitoring-view clusterrole. This role provides cluster-wide visibility into all namespaces, which is not appropriate for environments where users must be restricted to their own project(s).

      The customer is requesting a new capability that allows namespace-scoped access to the Metrics view. This would enable non-admin or tenant users to view only their project’s metrics without exposing metrics from other namespaces.

      3. Why does the customer need this? (List the business requirements here)

      The customer operates in a multi-tenant environment where different teams or projects must not have visibility into cluster-wide metrics.

      Granting cluster-wide roles such as cluster-monitoring-view violates the customer’s security compliance and least-privilege access policies.

      Without project-scoped Metrics access, developers must rely on administrators for troubleshooting, which slows incident resolution and affects developer productivity.

      This feature aligns with the customer’s security model that restricts users to their own namespaces.

      4. List any affected packages or components.

      • OpenShift Web Console (Console Operator)
      • RBAC / Authorization components
      • Observe → Metrics UI frontend behavior
      • Cluster Monitoring Operator
        •  

      Additional details -

      The enhancement should introduce either:

      • A new namespace-scoped role/rolebinding,
        or
      • A mechanism for the Metrics page to respect existing RBAC and show only metrics from the user’s allowed namespaces.

              amobrem Ali Mobrem
              rhn-support-sdharma Suruchi Dharma
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                None
                None