Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-526

Prometheus can't list pods, services and endpoints in multitenant mode

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Major Major
    • maistra-rc1
    • None
    • prometheus
    • None
    • RC1

      When running with multitenancy enabled, the Prometheus logs show the following errors:

      level=error ts=2019-06-18T16:34:18.306168442Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:289: Failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list pods at the cluster scope: no RBAC policy matched"
      level=error ts=2019-06-18T16:34:18.307061866Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:288: Failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list services at the cluster scope: no RBAC policy matched"
      level=error ts=2019-06-18T16:34:18.307891731Z caller=main.go:218 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:287: Failed to list *v1.Endpoints: endpoints is forbidden: User \"system:serviceaccount:istio-system:prometheus\" cannot list endpoints at the cluster scope: no RBAC policy matched"
      

              kconner@redhat.com Kevin Conner (Inactive)
              mluksa@redhat.com Marko Luksa
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: