Bug 1679495 - Project admin user can not get data from Prometheus on Project Status page
Summary: Project admin user can not get data from Prometheus on Project Status page
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.1.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.1.0
Assignee: Samuel Padgett
QA Contact: Yadan Pei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-02-21 09:22 UTC by XiaochuanWang
Modified: 2019-03-12 14:27 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-02-27 18:09:12 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
project admin can not access the data (22.56 KB, image/png)
2019-02-21 09:22 UTC, XiaochuanWang 		no flags Details
View All

Description XiaochuanWang 2019-02-21 09:22:09 UTC 
Created attachment 1536936 [details]
project admin can not access the data

Description of problem:
Project admin user check the Status Dashboard, the Alerts Firing and Crashlooping Pods displays "?" and Forbidden.

Version-Release number of selected component (if applicable):
4.0.0-0.nightly-2019-02-20-194410

How reproducible:
Always

Steps to Reproduce:
1. Project admin browse to Home -> Status-> Dashboard
2. Check the chart of Alerts Firing
3. Check the chart of Crashlooping Pods

Actual results:
Both 2 and 3: display "?" and Forbidden.
Please refer to the screenshot.

Expected results:
2. If the data could not be accessed by project admin user, it's better to be hidden or display meaningful message.
3. Crashlooping Pods should allow project user to visit.

Additional info:
Cluster-admin user could see the data.
Comment 1 Samuel Padgett 2019-02-21 14:26:03 UTC 
I can reproduce. We're not using the prometheus tenancy service port for these two requests.
Comment 2 Samuel Padgett 2019-02-21 14:35:55 UTC 
https://github.com/openshift/console/pull/1208
Comment 3 XiaochuanWang 2019-02-26 02:48:30 UTC 
The issue is not reproduced.

Verified on 4.0.0-0.nightly-2019-02-25-194625
registry.svc.ci.openshift.org/ocp/release@sha256:778658b191dbe5eec02ab4137609f17aaf13b9da8b3cf8c9cc5d70557034efb7
Note You need to log in before you can comment on or make changes to this bug.