Setup permissions in Kubernetes cluster to enable X-Ray traces generation

aws-samples / aws-microservices-deploy-options

This repo contains a simple application that consists of three microservices. Each application is deployed using different Compute options on AWS.

MIT No Attribution

427 stars 179 forks source link

Setup permissions in Kubernetes cluster to enable X-Ray traces generation #136

Open arun-gupta opened 6 years ago

arun-gupta commented 6 years ago

X-Ray traces are not getting generated. Daemonset is throwing the following error:

2018-03-29T22:08:26Z [Error] Sending segment batch failed with: AccessDeniedException: User: arn:aws:sts::091144949931:assumed-role/nodes.cluster.k8s.local/i-0ed2d662333fe3e41 is not authorized to perform: xray:PutTraceSegments

arun-gupta commented 6 years ago

Need to make sure that the k8s cluster is generated with appropriate IAM permissions. More details https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md

arun-gupta commented 6 years ago

In Console, open IAM roles, find nodes.cluster.k8s.local, attach AWSXrayFullAccess policy