observatorium / thanos-receive-controller

Kubernetes controller to automatically configure Thanos receive hashrings
Apache License 2.0
96 stars 46 forks source link

Add permission to get pods to RBAC Role #93

Closed AndreasSko closed 1 year ago

AndreasSko commented 2 years ago

The allow-only-ready-replicas feature requires permission to get pods. Otherwise the following error occurs:

failed polling until pod is ready" pod=thanos-receive-3 duration=4.340636ms err="pods " thanos-receive-3" is forbidden: User "system:serviceaccount:thanos:thanos-receive-controller" cannot get resource "pods" in API group "" in the namespace "thanos"

This PR adds the necessary permission to the example manifest, as well as the Jsonnet code.