search

grafana / mimir

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.
https://grafana.com/oss/mimir/
GNU Affero General Public License v3.0
4.03k stars 512 forks source link

Helm chart portability to multi-tenant k8s clusters #3091

Closed sushovan23 closed 1 year ago

sushovan23 commented 1 year ago

Describe the bug

I'm using the mimir helm chart with small.yaml as the values to evaluate the product. We have a multi-tenant k8s clusters where different teams get their namespace and deploy PODs there.

However running the helm as described gives the following error:

Unable to continue with install: could not get information about the resource PodSecurityPolicy "mimir-poc-small" in namespace "": podsecuritypolicies.policy "mimir-poc-small" is forbidden: User "MAAS" cannot get resource "podsecuritypolicies" in API group "policy" at the cluster scope

To Reproduce

Steps to reproduce the behavior: Perform helm install in multi-tenant k8s environment where you don't have access to PodSecurityPolicy apis.

Expected behavior

Should be able to deploy Mimir on multi-tenant k8s using provided helm charts.

Environment

dimitarvdimitrov commented 1 year ago

I assume this is related to https://grafana.slack.com/archives/C039863E8P7/p1664470252852749

sushovan23 commented 1 year ago

yes

sushovan23 commented 1 year ago

this can be closed. following setting solved it

rbac:
  create: false