Skip to content

Commit dba0c02

Browse files
authored
Merge pull request openshift#80359 from openshift-cherrypick-robot/cherry-pick-78162-to-logging-docs-6.0
[logging-docs-6.0] OSDOCS-10601: Updates to Custom admin group access for netobserv
2 parents 867f048 + 6dc4c25 commit dba0c02

File tree

1 file changed

+22
-2
lines changed

1 file changed

+22
-2
lines changed

modules/logging-loki-log-access.adoc

Lines changed: 22 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// Module included in the following assemblies:
22
//
3-
// * network_observability/installing-operators.adoc
3+
// * observability/network_observability/installing-operators.adoc
44
// * logging/cluster-logging-loki.adoc
55

66
:_mod-docs-content-type: CONCEPT
@@ -77,16 +77,36 @@ subjects:
7777
[id="custom-admin-group-access_{context}"]
7878
== Custom admin group access
7979

80-
If you have a large deployment with a number of users who require broader permissions, you can create a custom group using the `adminGroup` field. Users who are members of any group specified in the `adminGroups` field of the `LokiStack` CR are considered admins. Admin users have access to all application logs in all namespaces, if they also get assigned the `cluster-logging-application-view` role.
80+
// tag::LokiMode[]
81+
If you have a large deployment with several users who require broader permissions, you can create a custom group using the `adminGroup` field. Users who are members of any group specified in the `adminGroups` field of the `LokiStack` CR are considered administrators.
82+
// end::LokiMode[]
83+
84+
// tag::NetObservMode[]
85+
If you need to see cluster-wide logs without necessarily being an administrator, or if you already have any group defined that you want to use here, you can specify a custom group using the `adminGroup` field. Users who are members of any group specified in the `adminGroups` field of the `LokiStack` custom resource (CR) have the same read access to logs as administrators.
86+
// end::NetObservMode[]
87+
88+
// tag::LokiMode[]
89+
Administrator users have access to all application logs in all namespaces, if they also get assigned the `cluster-logging-application-view` role.
90+
// end::LokiMode[]
91+
92+
// tag::NetObservMode[]
93+
Administrator users have access to all network logs across the cluster.
94+
// end::NetObservMode[]
8195

8296
.Example `LokiStack` CR
8397
[source,yaml]
8498
----
8599
apiVersion: loki.grafana.com/v1
86100
kind: LokiStack
87101
metadata:
102+
# tag::LokiMode[]
88103
name: logging-loki
89104
namespace: openshift-logging
105+
# end::LokiMode[]
106+
# tag::NetObservMode[]
107+
name: loki
108+
namespace: netobserv
109+
# end::NetObservMode[]
90110
spec:
91111
tenants:
92112
# tag::LokiMode[]

0 commit comments

Comments
 (0)