Openshift Oauth Roles

[natecowen]

Hello,

I have successfully installed the newest version of the Grafana Operator into our cluster. I have been able to set everything up, but have figured out how to add roles for the users. Normally, this would be adding a role to the user/group within Openshift, but I can't seem to get that to work.

I didn't see any mention of this in the documentation for Openshift or the Oauth Proxy example. I did try to add this under the yaml for the config, but that doesn't see to work either.

auth.generic_oauth: role_attribute_path: contains(groups[*], 'system:cluster-admins') && 'GrafanaAdmin' || contains(groups[*], 'cluster-admin') && 'GrafanaAdmin' || contains(groups[*], 'dedicated-admin') && 'GrafanaAdmin' || 'Viewer'

I am able to login to Grafana using Openshift Oauth, but I always show as viewer under my profile.

Thanks for any insight that can be provided.

[theSuess]

The OAuth Proxy example does not use the auth.generic_oauth provider but relies on the auth.proxy functionality. Your options are to:

• Switch to the auth.generic_oauth provider following the Grafana & OpenShift documentation on this topic.
• Use the Team Sync functionality (Grafana Enterprise only)

[natecowen]

Can the documentation be updated to make this clearer? It's not really stated anywhere here that it won't pull in user roles and it's not specified on how to set a base user role with auth proxy.