Bug 1819628

Summary: normal user get 403 Forbidden error when viewing Network In and Network Out metric on Pod Details page
Product: OpenShift Container Platform Reporter: Yadan Pei <yapei>
Component: Management ConsoleAssignee: Yadan Pei <yapei>
Status: CLOSED ERRATA QA Contact: Yadan Pei <yapei>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.5CC: aos-bugs, jokerman, rhamilto, yapei
Target Milestone: ---   
Target Release: 4.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of:
: 1821625 (view as bug list) Environment:
Last Closed: 2020-07-13 17:24:43 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1821625    
Attachments:
Description Flags
Normal User Get Pod Metrics Successfully none

Description Yadan Pei 2020-04-01 08:36:52 UTC 
Description of problem:
When normal user view metrics on Pod details page, it always show 'No datapoints found' in Network In and Network Out chart while on project overview, Network Transfer(including Network In and Network Out) data is shown correctly
 
Version-Release number of selected component (if applicable):
4.5.0-0.nightly-2020-03-31-203533

How reproducible:
Always

Steps to Reproduce:
1. normal user create a project and add application
$ oc new-app ruby~https://github.com/sclorg/ruby-ex.git
2. when pod is running, view pod metrics on Pod details page

Actual results:
2. Memory Usage, CPU Usage, Filesystem charts are shown correctly, it always show 'No datapoints found' in Network In and Network Out chart. Also the fetch request returns 403 
Request URL:https://<console_route>/api/prometheus/api/v1/query_range?start=1585725918.507&end=1585729518.507&step=60&query=sum%28irate%28container_network_receive_bytes_total%7Bpod%3D%27ruby-ex-1-fnngw%27%2C+namespace%3D%27yapei1-1%27%7D%5B5m%5D%29%29+by+%28pod%2C+namespace%29
Request URL:https://<console_route>/api/prometheus/api/v1/query_range?start=1585725919.918&end=1585729519.918&step=60&query=sum%28irate%28container_network_transmit_bytes_total%7Bpod%3D%27ruby-ex-1-fnngw%27%2C+namespace%3D%27yapei1-1%27%7D%5B5m%5D%29%29+by+%28pod%2C+namespace%29

Expected results:
2. Network In and Network Out data should be loaded correctly 

Additional info:
Comment 3 Yadan Pei 2020-04-13 05:53:04 UTC 
Created attachment 1678375 [details]
Normal User Get Pod Metrics Successfully

Now user can get view Network In and Network Out metrics without 403 error

Verified on 4.5.0-0.nightly-2020-04-12-180647
Comment 5 errata-xmlrpc 2020-07-13 17:24:43 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2409