Bug 2041769 - Pipeline Metrics page not showing data for normal user
Summary: Pipeline Metrics page not showing data for normal user
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Dev Console
Version: 4.10
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: ---
: 4.11.0
Assignee: Vikram Raj
QA Contact: spathak@redhat.com
Olivia Payne
URL:
Whiteboard:
Depends On:
Blocks: 2067983
TreeView+ depends on / blocked
 
Reported: 2022-01-18 09:18 UTC by Vikram Raj
Modified: 2022-08-10 10:42 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: The pipeline metrics page is showing data to the none admin users. Consequence: All the API calls for the metrics query are failing with a 403 error. Fix: Used the `prometheus-tenancy` API to get the metrics data for the Pipeline. Result: The pipeline metrics page shows all the data and Graphs to the none admin user with at least view access to the Namespace.
Clone Of:
Environment:
Last Closed: 2022-08-10 10:42:31 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Pipeline metrics network calls are failing with 403 error (453.79 KB, image/png)
2022-01-18 09:18 UTC, Vikram Raj
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 10870 0 None open Bug 2041769: Pipeline metrics: use prometheus-tenancy API to get data 2022-01-18 09:44:37 UTC
Red Hat Product Errata RHSA-2022:5069 0 None None None 2022-08-10 10:42:52 UTC

Description Vikram Raj 2022-01-18 09:18:58 UTC
Created attachment 1851539 [details]
Pipeline metrics network calls are failing with 403 error

Description of problem:
Pipeline Metrics page not showing data for the normal user. All the API calls are failing with 403 error.


Version-Release number of selected component (if applicable): 4.10 and 4.9


How reproducible:


Steps to Reproduce:
1. Login as a normal user with only self-provisioned role binding to a namespace.
2. Create a namespace and a pipeline to it
3. navigate to the Pipline -> Pipeline details -> Metrics

Actual results:
API calls are failing with 403 error

Expected results:
API calls should not fail with any error.

Additional info:

Comment 3 Karthik Jeeyar 2022-03-28 11:58:22 UTC
Verified as console developer user (with View only permission) and able to view the pipeline metrics as expected.

build: 4.11.0-0.nightly-2022-03-27-140854

Comment 7 Christoph Jerolimov 2022-04-25 16:03:23 UTC
Thanks to Vikram I could verify this now on 4.11.0-0.nightly-2022-04-23-153426.

It was required to give the user additional view permissions on the openshift-pipeline namespace.

I created a follow-up bug #2078565 so that the Metrics tab is not shown if the user has not have enough permissions.

Comment 11 errata-xmlrpc 2022-08-10 10:42:31 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069


Note You need to log in before you can comment on or make changes to this bug.