search

rancher / rancher-docs

Rancher Documentation
https://ranchermanager.docs.rancher.com/
Apache License 2.0
60 stars 206 forks source link

Check validity of claim about access to Kiali UI in Istio docs #1059

Open martyav opened 9 months ago

martyav commented 9 months ago

Related Issues

Summary

From Slack:

The following chunk on the Istio documentation page in Rancher is really misleading: "Your access to the visualizations depend on your role. Grafana and Prometheus are only available for cluster-admin roles. The Kiali UI is available only to cluster-admin by default, but cluster-admin can allow other roles to access them by editing the Istio values.yaml." There is no mention anywhere (that I was able to check) of configuration in the "values.yaml" that provides the option to customize access to the KialiUI.

The only relevant option that I could find was in Istio 1.5 and Rancher v2.5. So my guess is that this is outdated.

martyav commented 7 months ago

@nicholasSUSE I was hoping you could help with this. I haven't been able to find any mention of Kiali either but it's possible that I overlooked something. Can you confirm?

nicholasSUSE commented 5 months ago

ly available for cluster-admin roles. The Kiali UI is available only to cluster-admin by default

Hello @martyav I will provide feedback for this soon

Tejeev commented 4 months ago

So I was standing up Istio for the first time in a long time and my methodology for generating the token to log into Kiali for the first time looks to be deprecated and my attempt to follow the Istio docs to generate a temporary token failed because our deployment uses the kiali service account rather than the kiali-service-account service account. Would it makes sense for us to fold the addition of a note for generating the session token to the docs as part of this effort to update the Kiali access doc?

martyav commented 4 months ago

@Tejeev that sounds related, but imo we should keep this issue more narrowly focused on the original question. I'm still not sure how to resolve it. Is it possible for a Rancher user to edit who has access to the Kiali UI?

We can open a separate issue for how to generate the session token.

Tejeev commented 4 months ago

Ok, that's fair. Honestly I don't know. I was going to the docs then the bugs to find out exactly this sort of thing