search

devopsprodigy / kubegraf

Grafana-plugin for k8s' monitoring
MIT License
407 stars 45 forks source link

kubegraf on EKS #29

Closed jicowan closed 4 years ago

jicowan commented 4 years ago

The ca/bearer token works for EKS, however, I'm not sure what minimum permissions to assign to the service account that corresponds to the bearer token. the service account assigned to my grafana pod has the following permissions: 

rules:
  - verbs:
      - use
    apiGroups:
      - extensions
    resources:
      - podsecuritypolicies
    resourceNames: 
      - grafana
jicowan commented 4 years ago

Nevermind, I found it on the DevProdigy kubegraf site, https://github.com/devopsprodigy/kubegraf/tree/master/kubernetes.