Alan Conway

Currently korrle8r runs with an elevated "read everything" role to get access to all signal stores. This means it can't be used by less-priveledged users, since they could use it...

[OSC-9 The regular user with cluster-monitoring-view role can not execute the query from korrel8r](https://issues.redhat.com/browse/OSC-9)

See [OSC-7]

Korrel8r needs read access to multiple stores, containing potentially sensitive information, with different authn/authz rules. Currently it can only be deployed an run by an admin users. A restricted-access users...

Metric domain: rules both directions, don't pick up all samples

1

Korrle8r uses metric labels, not sample values so we shouldn't retrieve all samples. However: if there are time constraints on a query we should only retrieve metrics with samples in...

The existing 'log' domain uses logs stored in Loki. This is important to provide long-term access to stored logs. For short term debugging, or when there is no log store...

k8s queries are parsed as YAML, which requires a space or " after a field. This: korrel8r get 'k8s:Namespace:{name:korrel8r}' missing space--------------------------------^ is invalid YAML but no error is reported, and...