Bug 1609811 - [RFE] support shared_non_ops as Kibana index mode
Summary: [RFE] support shared_non_ops as Kibana index mode
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 3.10.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 3.10.z
Assignee: Jeff Cantrill
QA Contact: Qiaoling Tang
URL:
Whiteboard:
Depends On: 1608984 1609813
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-07-30 14:18 UTC by Jeff Cantrill
Modified: 2021-12-10 16:49 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
undefined
Clone Of: 1608984
Environment:
Last Closed: 2018-09-22 04:55:14 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github https://github.com/openshift openshift-ansible pull 9353 0 None None None 2020-08-28 08:07:12 UTC
Github openshift openshift-ansible pull 9363 0 None closed [release-3.10] Allow shared_non_ops as kibana index mode 2020-08-28 08:07:12 UTC
Red Hat Product Errata RHBA-2018:2660 0 None None None 2018-09-22 04:56:04 UTC

Comment 6 Jeff Cantrill 2018-08-29 20:03:18 UTC
The intention is such that everyone shares dashboards.  This is the same as offered by a non-Openshift version of Kibana except we are distinguishing between admin and non-admin users.  There is nothing to prevent users from doing anything, which is by design.  We do not intend to provide additional modifications.

Note also as identified by step 9, if a user does not have access to a given project they will see permission errors.  This particular stack, I believe, is related to code which removes index patterns where you no longer see a set of projects which makes sense in this case.  One user seeded the index patterns and the plugin removed them for the other user because he does not have visibility to the projects.

This bz was really about exposing the configuration option and not necessarily the specifics of the feature.  I'm not sure what the right solution here is.  I suspect it would make more sense in this configuration to maybe disable restrictions on log access as it's otherwise difficult to handle correctly with the limitations of Kibana's design.

Comment 7 Jeff Cantrill 2018-08-30 21:29:13 UTC
Moving to modified as the code is already in ansible to allow you to set the configuration.

Comment 8 Anping Li 2018-08-31 09:29:14 UTC
@jeff, For we don't modify the upstream code. QE can accept this feature. For everyone can modify the dashboard, the Openshift Administrator should be cautious to enable it.

Comment 11 errata-xmlrpc 2018-09-22 04:55:14 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:2660


Note You need to log in before you can comment on or make changes to this bug.