No Data Points Collected After Successful Deployment? about kubernetes-app HOT 3 OPEN

EDIT: It appears that the user associated with the certificates in my ~/.kube/config file doesn't have the required permissions to list resources in the cluster as indicated by the following example log from the kube-state-metrics pod.

k8s.io/kube-state-metrics/collectors/resourcequota.go:67: Failed to list *v1.ResourceQuota: resourcequotas is forbidden: User "system:serviceaccount:kube-system:default" cannot list resource "resourcequotas" in API group "" at the cluster scope

How should I properly create a user to remediate this?

from kubernetes-app.

@zimmertr
use this guide: https://docs.bitnami.com/kubernetes/how-to/configure-rbac-in-your-kubernetes-cluster/

generate a new certificate with the proper access, and itll work fine.

from kubernetes-app.

Hi @cbluth, I implemented the steps in that Bitnami guide as an Ansible playbook found here.

Here is the ClusterRole that the user uses and here is how it is bound to the user.

However, despite this, Grafana throws this error when I configure it with the generated certificates.

Furthermore, if I attempt to run any command with the user context, it says I'm unauthorized.

$> kubectl --context=grafana-prometheus-scraper get pods -n grafana
error: You must be logged in to the server (Unauthorized)

Any ideas?

from kubernetes-app.