All Console graphs should be viewable after creating a cluster role binding for users with the View role.
ClusterRole that fixes the issues with the Console widgets without providing view access to the entire cluster. Create this role and associating it with user object (email).
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: view-dashboard
rules:
- verbs:
- proxy
apiGroups:
- ''
resources:
- endpoints
- services
resourceNames:
- 'prometheus:9090'
Comments
0 comments
Please sign in to leave a comment.