influxdata / tick-charts

A repository for Helm Charts for the full TICK Stack
Apache License 2.0
90 stars 74 forks source link

Kapacitor Failed to list resource #102

Open LeonChadwick opened 5 years ago

LeonChadwick commented 5 years ago

kapacitor/templates/config.yaml has multiple [[kubernetes]] blocks configured set to use the in_cluster mode. This generates errors like seen below in the kapacitord log:

│ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor 2019/06/14 17:59:24 Using configuration at: /etc/kapacitor/kapacitor.conf │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.425Z lvl=info msg="kapacitor starting" service=run version=1.5.2 branch=HEAD commit=3086452d00830e01d932838d8c6d1df818648ad3 │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.425Z lvl=info msg="go version" service=run version=go1.11.2 │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.425Z lvl=info msg="listing Kapacitor hostname" source=srv hostname=alerts-kapacitor-85bbdf59f4-sdvqd │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.425Z lvl=info msg="listing ClusterID and ServerID" source=srv cluster_id=a3bdf363-954a-4939-9ede-f08a597db380 server_id=d129b614-0d5b-43e5-97b7-53ad2ab63e5b │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.426Z lvl=info msg="opened task master" service=kapacitor task_master=main │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.515Z lvl=info msg="Starting target manager..." service=scraper │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.516Z lvl=info msg="starting HTTP service" service=http │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.516Z lvl=info msg=authentication service=http enabled=false │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.516Z lvl=info msg="Using pod service account via in-cluster config" service=scraper │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.516Z lvl=info msg="listening on" service=http addr=[::]:9092 protocol=http │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor ts=2019-06-14T17:59:24.516Z lvl=info msg="listening for signals" service=run │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor time="2019-06-14T17:59:24Z" level=error msg="github.com/influxdata/kapacitor/vendor/k8s.io/client-go/1.5/tools/cache/reflector.go:109: Failed to list v1.Pod: pods is forbidden: Us │ │ er "system:serviceaccount:tick:default" cannot list resource "pods" in API group "" at the cluster scope" component="kube_client_runtime" source="kubernetes.go:73" │ │ alerts-kapacitor-85bbdf59f4-sdvqd:kapacitor time="2019-06-14T17:59:25Z" level=error msg="github.com/influxdata/kapacitor/vendor/k8s.io/client-go/1.5/tools/cache/reflector.go:109: Failed to list v1.Pod: pods is forbidden: Us │ │ er "system:serviceaccount:tick:default" cannot list resource "pods" in API group "" at the cluster scope" component="kube_client_runtime" source="kubernetes.go:73" │