Document URL: https://docs.openshift.com/container-platform/3.4/install_config/cluster_metrics.html#metrics-service-accounts
Section Number and Name: Service Accounts
Describe the issue: With the release of OCP 3.4 we see that the hawkular pods now require view permission :
Error: the service account for Hawkular Metrics does not have permission to view resources in this namespace. View permissions are required for Hawkular Metrics to function properly.
Usually this can be resolved by running: oc adm policy add-role-to-user view system:serviceaccount:openshift-infra:hawkular -n openshift-infra
Suggestions for improvement: Under service-accounts section add :
oc adm policy add-role-to-user view system:serviceaccount:openshift-infra:hawkular -n openshift-infra
Seems this section was taken out with this PR:
Jeff, can I ask why? Does the Hawular section need the suggestion above? Your PR is for 3.5, so I'm guessing it needs an update for 3.4?
This issue and its fix is the same with 1428998, and it's fixed now.
(In reply to brice from comment #1)
> Seems this section was taken out with this PR:
> Jeff, can I ask why? Does the Hawular section need the suggestion above?
> Your PR is for 3.5, so I'm guessing it needs an update for 3.4?
@bfallonf, the fix for this bug is reported in several other bugs and it's fixed already.
In 3.5, the Metrics deployment will move to using ansible, and that's Jeff's PR for.
Ah so it is. Thank you, Peng Li.