Skip to content

RBAC permission to view metrics graphs #3500

Open
@VishnuPBR

Description

@VishnuPBR

Hi,

I created RBAC role for a user to view only his namespace and pod which is working as expected but graphs metrics cpu/memory is not visible until you assign clusterrole and binding permission atleast to list all pods.

I had to permission this role to view the graph, is there any fix ?

5. UI listing to view graph cpu/memory


apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: user-list-minimal-discovery
rules:

  • apiGroups: [""]
    resources: ["namespaces", "pods", "services"]
    verbs: ["list"]

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: user-list-minimal-discovery-binding
subjects:

  • kind: User
    name: user@email.com
    apiGroup: rbac.authorization.k8s.io
    roleRef:
    kind: ClusterRole
    name: user-list-minimal-discovery
    apiGroup: rbac.authorization.k8s.io

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    Queued

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions