-
Task
-
Resolution: Done
-
Major
-
None
-
None
-
RC1
When running with multitenancy enabled, the Prometheus logs show the following errors:
level=error ts=2019-06-18T16:34:18.306168442Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:289: Failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list pods at the cluster scope: no RBAC policy matched" level=error ts=2019-06-18T16:34:18.307061866Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:288: Failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list services at the cluster scope: no RBAC policy matched" level=error ts=2019-06-18T16:34:18.307891731Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:287: Failed to list *v1.Endpoints: endpoints is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list endpoints at the cluster scope: no RBAC policy matched"
- causes
-
MAISTRA-531 Add multi-tenancy support to Prometheus
- Closed