Document URL: https://docs.openshift.com/container-platform/3.4/install_config/cluster_metrics.html#metrics-service-accounts Section Number and Name: Service Accounts Describe the issue: With the release of OCP 3.4 we see that the hawkular pods now require view permission : Error: the service account for Hawkular Metrics does not have permission to view resources in this namespace. View permissions are required for Hawkular Metrics to function properly. Usually this can be resolved by running: oc adm policy add-role-to-user view system:serviceaccount:openshift-infra:hawkular -n openshift-infra Suggestions for improvement: Under service-accounts section add : oc adm policy add-role-to-user view system:serviceaccount:openshift-infra:hawkular -n openshift-infra Additional information:
Seems this section was taken out with this PR: https://github.com/openshift/openshift-docs/commit/72a6296b607a3060b4905f0eb0ea0b71b7c2838d Jeff, can I ask why? Does the Hawular section need the suggestion above? Your PR is for 3.5, so I'm guessing it needs an update for 3.4?
This issue and its fix is the same with 1428998, and it's fixed now.
(In reply to brice from comment #1) > Seems this section was taken out with this PR: > > https://github.com/openshift/openshift-docs/commit/ > 72a6296b607a3060b4905f0eb0ea0b71b7c2838d > > Jeff, can I ask why? Does the Hawular section need the suggestion above? > Your PR is for 3.5, so I'm guessing it needs an update for 3.4? @bfallonf, the fix for this bug is reported in several other bugs and it's fixed already. In 3.5, the Metrics deployment will move to using ansible, and that's Jeff's PR for.
Ah so it is. Thank you, Peng Li.