Bug 2020000 - Metrics view in Deployment reports "Forbidden" when not cluster-admin
Summary: Metrics view in Deployment reports "Forbidden" when not cluster-admin
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.8
Hardware: x86_64
OS: Linux
high
high
Target Milestone: ---
: 4.9.z
Assignee: Jon Jackson
QA Contact: Siva Reddy
URL:
Whiteboard:
Depends On: 2015806
Blocks: 2024206
TreeView+ depends on / blocked
 
Reported: 2021-11-03 19:45 UTC by Jon Jackson
Modified: 2021-12-08 08:32 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 2015806
: 2024206 (view as bug list)
Environment:
Last Closed: 2021-11-22 21:47:05 UTC
Target Upstream Version:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 10396 0 None open [release-4.9] Bug 2020000: Fix resource metrics 403 errors for project admin users 2021-11-03 19:49:34 UTC
Red Hat Product Errata RHBA-2021:4712 0 None None None 2021-11-22 21:47:18 UTC

Comment 2 Siva Reddy 2021-11-17 00:38:06 UTC 
clusterversion:
 4.9.0-0.nightly-2021-11-16-232713

Verification steps:
1. Login in OCP as a normal user
2. Change user to 'Administrator' perspective, create a Deployment with the user that has project admin role
3. Navigate to Deployment -> Deployment details page -> Metrics tab
4. Verify if user is able to check Metrics on deployment details page without any error
5. Update perspective from administrator to developer mode
6. Navigate to Topology ->  Deployment, select the deployment that was created on step2, then goto Observe tab
7. Verify if user is able to check Metrics on Observe tab without any error
8. Re-login OCP as cluster-admin
9. Repeat step3-7

Result:
   No error message found on Metrics, user is able to check Metrics normally and correctly
Comment 5 errata-xmlrpc 2021-11-22 21:47:05 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.9.8 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4712
Note You need to log in before you can comment on or make changes to this bug.