Comments (3)
EDIT: It appears that the user associated with the certificates in my ~/.kube/config
file doesn't have the required permissions to list resources in the cluster as indicated by the following example log from the kube-state-metrics
pod.
k8s.io/kube-state-metrics/collectors/resourcequota.go:67: Failed to list *v1.ResourceQuota: resourcequotas is forbidden: User "system:serviceaccount:kube-system:default" cannot list resource "resourcequotas" in API group "" at the cluster scope
How should I properly create a user to remediate this?
from kubernetes-app.
@zimmertr
use this guide: https://docs.bitnami.com/kubernetes/how-to/configure-rbac-in-your-kubernetes-cluster/
generate a new certificate with the proper access, and itll work fine.
from kubernetes-app.
Hi @cbluth, I implemented the steps in that Bitnami guide as an Ansible playbook found here.
Here is the ClusterRole that the user uses and here is how it is bound to the user.
However, despite this, Grafana throws this error when I configure it with the generated certificates.
Furthermore, if I attempt to run any command with the user context, it says I'm unauthorized.
$> kubectl --context=grafana-prometheus-scraper get pods -n grafana
error: You must be logged in to the server (Unauthorized)
Any ideas?
from kubernetes-app.
Related Issues (20)
- InfluxDB/Telegraf Support
- Panel Plugin missing for grafana-kubernetes-app plugin HOT 2
- node_filesystem variable outdate HOT 1
- Adding datasource prometheus in grafana HTTP Error Not Found
- Error while initializing promtheus configmap, Node Exporter and Kube-State Metrics via Grafana
- New version of kube-state-metrics shows deprecations upcoming which are used in k8s-cluster dashboard
- Install command is wrong in https://grafana.com/grafana/plugins/grafana-kubernetes-app HOT 1
- public/plugins/grafana-kubernetes-datasource/img/logo.svg not found
- Memory Metrics are doubled Grafana HOT 1
- Is this app abandoned? HOT 5
- Why does this plugin ask me for user/passwd (basic auth)?
- Add a new cluster only gives Basic auth option HOT 1
- How to configure kubernetes cluster HOT 5
- Datasource is hardcoded for `v1beta1` api HOT 3
- invalid documentation
- Grafana not showing Pod/Container name in dashboard
- Connecting to K8s cluster HOT 1
- Pod filtering panel broken HOT 1
- Unsigned external plugin HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubernetes-app.