Bug 1609811
| Summary: | [RFE] support shared_non_ops as Kibana index mode | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Jeff Cantrill <jcantril> |
| Component: | Logging | Assignee: | Jeff Cantrill <jcantril> |
| Status: | CLOSED ERRATA | QA Contact: | Qiaoling Tang <qitang> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 3.10.0 | CC: | anli, aos-bugs, farandac, jcantril, rmeggins |
| Target Milestone: | --- | ||
| Target Release: | 3.10.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | No Doc Update | |
| Doc Text: |
undefined
|
Story Points: | --- |
| Clone Of: | 1608984 | Environment: | |
| Last Closed: | 2018-09-22 04:55:14 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1608984, 1609813 | ||
| Bug Blocks: | |||
|
Comment 1
Jeff Cantrill
2018-07-30 14:19:17 UTC
The intention is such that everyone shares dashboards. This is the same as offered by a non-Openshift version of Kibana except we are distinguishing between admin and non-admin users. There is nothing to prevent users from doing anything, which is by design. We do not intend to provide additional modifications. Note also as identified by step 9, if a user does not have access to a given project they will see permission errors. This particular stack, I believe, is related to code which removes index patterns where you no longer see a set of projects which makes sense in this case. One user seeded the index patterns and the plugin removed them for the other user because he does not have visibility to the projects. This bz was really about exposing the configuration option and not necessarily the specifics of the feature. I'm not sure what the right solution here is. I suspect it would make more sense in this configuration to maybe disable restrictions on log access as it's otherwise difficult to handle correctly with the limitations of Kibana's design. Moving to modified as the code is already in ansible to allow you to set the configuration. @jeff, For we don't modify the upstream code. QE can accept this feature. For everyone can modify the dashboard, the Openshift Administrator should be cautious to enable it. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:2660 |