Closed brodul closed 4 years ago
I have done some exploring on the issue. Added some logs to the app.py
WARNING:root:{'nodes': {'kind': 'Status', 'apiVersion': 'v1', 'metadata': {}, 'status': 'Failure', 'message': 'nodes.metrics.k8s.io is forbidden: User "system:serviceaccount:default:metrics-server-exporter" cannot list resource "nodes" in API group "metrics.k8s.io" at the cluster scope', 'reason': 'Forbidden', 'details': {'group': 'metrics.k8s.io', 'kind': 'nodes'}, 'code': 403}, 'pods': {'kind': 'Status', 'apiVersion': 'v1', 'metadata': {}, 'status': 'Failure', 'message': 'pods.metrics.k8s.io is forbidden: User "system:serviceaccount:default:metrics-server-exporter" cannot list resource "pods" in API group "metrics.k8s.io" at the cluster scope', 'reason': 'Forbidden', 'details': {'group': 'metrics.k8s.io', 'kind': 'pods'}, 'code': 403}}
WARNING:root:{'nodes': {'kind': 'Status', 'apiVersion': 'v1', 'metadata': {}, 'status': 'Failure', 'message': 'nodes.metrics.k8s.io is forbidden: User "system:serviceaccount:default:metrics-server-exporter" cannot list resource "nodes" in API group "metrics.k8s.io" at the cluster scope', 'reason': 'Forbidden', 'details': {'group': 'metrics.k8s.io', 'kind': 'nodes'}, 'code': 403}, 'pods': {'kind': 'Status', 'apiVersion': 'v1', 'metadata': {}, 'status': 'Failure', 'message': 'pods.metrics.k8s.io is forbidden: User "system:serviceaccount:default:metrics-server-exporter" cannot list resource "pods" in API group "metrics.k8s.io" at the cluster scope', 'reason': 'Forbidden', 'details': {'group': 'metrics.k8s.io', 'kind': 'pods'}, 'code': 403}}
The problem is that the permissions in the deploy
and in helm
are not set correctly. helm
chart works if you deploy it in kube-system
but it will otherwise not work.
Oh, I see. The helm chart is handling the namespace
parameter purely. It would make more sense to use https://helm.sh/docs/chart_template_guide/builtin_objects/ Release.Namespace
Would you except a PR that reworks the values and the chart slight to do things in a more Helm way?
Sorry for the delay in replying, we had holidays these days around here. and of course!, any contribution is welcome :smiley:
I hope you had some rest. :rocket: I opened another PR which makes the project useful for my case.
:wave: Tnx for the awesome project. I have an similar issue than #26
I have deployed the project with:
When I check the
/metric
via port-forwarding the exporter service:I have some pods:
Service account, role and rolebinding is present as described in
deploy
.There are no logs. Any ideas?