Description of problem: oc adm top pod Error from server (Forbidden): pods.metrics.k8s.io is forbidden: User "metrics-test" cannot list pods.metrics.k8s.io in the namespace "metrics-test": no RBAC policy matched Upstream metrics-server added an aggregated reader cluster role for this purpose: https://github.com/kubernetes-incubator/metrics-server/pull/149/files Version-Release number of selected component (if applicable): 3.11 How reproducible: oc adm top pod as a project admin Steps to Reproduce: 1. 2. 3. Actual results: Error from server (Forbidden): pods.metrics.k8s.io is forbidden: User "metrics-test" cannot list pods.metrics.k8s.io in the namespace "metrics-test": no RBAC policy matched Expected results: Project admin should be able to see metrics from project. Additional info:
https://github.com/openshift/openshift-ansible/pull/11978 was merged to setting status to modified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:3817