-
Feature Request
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
Product / Portfolio Work
-
None
-
False
-
-
None
-
None
-
None
-
-
None
-
None
-
None
-
None
-
None
1. Proposed title of this feature request
Enable project-level access to Observe -> Metrics tab in Developer View without requiring cluster-admin or cluster-wide monitoring permissions.
2. What is the nature and description of the request?
Currently, the Metrics page under Developer View → Observe → Metrics in the OpenShift web console requires users to have the cluster-monitoring-view clusterrole. This role provides cluster-wide visibility into all namespaces, which is not appropriate for environments where users must be restricted to their own project(s).
The customer is requesting a new capability that allows namespace-scoped access to the Metrics view. This would enable non-admin or tenant users to view only their project’s metrics without exposing metrics from other namespaces.
3. Why does the customer need this? (List the business requirements here)
The customer operates in a multi-tenant environment where different teams or projects must not have visibility into cluster-wide metrics.
Granting cluster-wide roles such as cluster-monitoring-view violates the customer’s security compliance and least-privilege access policies.
Without project-scoped Metrics access, developers must rely on administrators for troubleshooting, which slows incident resolution and affects developer productivity.
This feature aligns with the customer’s security model that restricts users to their own namespaces.
4. List any affected packages or components.
- OpenShift Web Console (Console Operator)
- RBAC / Authorization components
- Observe → Metrics UI frontend behavior
- Cluster Monitoring Operator
Additional details -
The enhancement should introduce either:
- A new namespace-scoped role/rolebinding,
or
- A mechanism for the Metrics page to respect existing RBAC and show only metrics from the user’s allowed namespaces.