From 59755080a8c27226f3c4f3301ee8d2f129881c52 Mon Sep 17 00:00:00 2001 From: Armagan Karatosun Date: Mon, 5 Feb 2024 12:43:55 +0100 Subject: [PATCH] Update rbac-for-monitoring.md inheriting the "View Monitoring" role is not enough to access the monitoring ui components. additional access to services/proxy and endpoints is needed. --- .../monitoring-and-alerting/rbac-for-monitoring.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/docs/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring.md b/docs/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring.md index 1caa47cc30ba..9ca1bffbefea 100644 --- a/docs/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring.md +++ b/docs/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring.md @@ -89,9 +89,13 @@ The UI won't offer `monitoring-admin`, `monitoring-edit`, and `monitoring-view` 1.3 In the **Name** field, create a custom role such as `View Monitoring`, `Edit Monitoring`, or `Admin Monitoring`. - 1.4 Click **Inherit From > Add Resource**, then select the Kubernetes role, as applicable, from the dropdown. + 1.4 Click **Grant Resources > Add Resource**, then select `get` as `Verbs` and `services/proxy` as `Resource` - 1.5 Click **Create**. + 1.5 Click **Grant Resources > Add Resource**, then select `list` as `Verbs` and `endpoints` as `Resource` + + 1.6 Click **Inherit From > Add Resource**, then select the Kubernetes role, as applicable, from the dropdown. + + 1.7 Click **Create**. 2. Assign the custom role to a new user: @@ -259,4 +263,4 @@ To see the Grafana UI, install `rancher-monitoring`. Then:
Default Dashboards in Grafana
-![Default Dashboards in Grafana](/img/grafana-default-dashboard.png) \ No newline at end of file +![Default Dashboards in Grafana](/img/grafana-default-dashboard.png)