grafana / k8s-monitoring-helm

Apache License 2.0
223 stars 86 forks source link

Prevent Kepler deployment on fargate #915

Open petewall opened 3 days ago

skpaz commented 3 days ago

GKE Autopilot clusters do not like Kepler!

Raw error text:

Error: release grafana-k8s-monitoring failed, and has been uninstalled due to atomic being set: 1 error occurred:
    * admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints.
Violations details: {"[denied by autogke-disallow-hostnamespaces]":["enabling hostNetwork is not allowed in Autopilot."],"[denied by autogke-disallow-privilege]":["container kepler-exporter is privileged; not allowed in Autopilot"],"[denied by autogke-no-host-port]":["container kepler-exporter specifies host ports [9102], which are disallowed in Autopilot."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume lib-modules in container kepler-exporter is accessed in write mode; disallowed in Autopilot.","hostPath volume tracing in container kepler-exporter is accessed in write mode; disallowed in Autopilot.","hostPath volume proc in container kepler-exporter is accessed in write mode; disallowed in Autopilot."]}
Requested by user: '<REDACTED>', groups: 'system:authenticated'.

Extracted JSON/error:

{
    "[denied by autogke-disallow-hostnamespaces]":[
        "enabling hostNetwork is not allowed in Autopilot."
    ],
    "[denied by autogke-disallow-privilege]":[
        "container kepler-exporter is privileged; not allowed in Autopilot"
    ],
    "[denied by autogke-no-host-port]":[
        "container kepler-exporter specifies host ports [9102], which are disallowed in Autopilot."
    ],
    "[denied by autogke-no-write-mode-hostpath]":[
        "hostPath volume lib-modules in container kepler-exporter is accessed in write mode; disallowed in Autopilot.",
        "hostPath volume tracing in container kepler-exporter is accessed in write mode; disallowed in Autopilot.",
        "hostPath volume proc in container kepler-exporter is accessed in write mode; disallowed in Autopilot."
    ]
}

I unselected the Energy Metrics option and Alloy installed w/out issue. YAML equivalent:

metrics:
  kepler:
    enabled: false

kepler:
  enabled: false

Possible solutions: