Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resources Monitor Plugin doesn't have enough permissions to read Pod information on Hosted Che #18812

Closed
2 of 9 tasks
svor opened this issue Jan 15, 2021 · 0 comments
Closed
2 of 9 tasks
Assignees
Labels
area/plugins kind/bug Outline of a bug - must adhere to the bug report template. severity/P2 Has a minor but important impact to the usage or development of the system. sprint/current
Milestone

Comments

@svor
Copy link
Contributor

svor commented Jan 15, 2021

Describe the bug

It's continuation of eclipse-che/che-theia#919.

On Hosted Che instance we can't get information about the workspace's pod from the theia plugin by using k8s API. Looks like there is not enough permissions for service account.

2021-01-13 14:07:52.629 root ERROR [hosted-plugin: 46] With stack trace: Error: Cannot read Pod information. Status code: 403. Error: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"pods \"workspacegdve9us4ad860vrl.go-cli-85c4d6d888-mb7bc\" is forbidden: User \"system:serviceaccount:vsvydenk-che:che-workspace\" cannot get resource \"pods\" in API group \"\" in the namespace \"vsvydenk-che\"","reason":"Forbidden","details":{"name":"workspacegdve9us4ad860vrl.go-cli-85c4d6d888-mb7bc","kind":"pods"},"code":403}

    at ResMon.<anonymous> (/tmp/theia-unpacked/eclipse_che_resource_monitor_plugin.theia/lib/resource-monitor-plugin.js:119:35)
    at step (/tmp/theia-unpacked/eclipse_che_resource_monitor_plugin.theia/lib/resource-monitor-plugin.js:42:23)
    at Object.next (/tmp/theia-unpacked/eclipse_che_resource_monitor_plugin.theia/lib/resource-monitor-plugin.js:23:53)
    at fulfilled (/tmp/theia-unpacked/eclipse_che_resource_monitor_plugin.theia/lib/resource-monitor-plugin.js:14:58)
    at processTicksAndRejections (internal/process/task_queues.js:97:5)

Che version

  • latest
  • nightly
  • other: please specify

Steps to reproduce

  1. Create a workspace on Hosted instance
  2. Click on the ban icon in the status bar and see a warning message.

Expected behavior

Status bar should contain an information about resources

Runtime

  • kubernetes (include output of kubectl version)
  • Openshift (include output of oc version)
  • minikube (include output of minikube version and kubectl version)
  • minishift (include output of minishift version and oc version)
  • docker-desktop + K8S (include output of docker version and kubectl version)
  • dogfooding instance

Screenshots

screenshot-che-dogfooding apps che-dev x6e0 p1 openshiftapps com-2021 01 14-15_06_19

@svor svor added kind/bug Outline of a bug - must adhere to the bug report template. team/plugins severity/P2 Has a minor but important impact to the usage or development of the system. area/plugins labels Jan 15, 2021
tolusha pushed a commit that referenced this issue Feb 23, 2021
refs #18812.

Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
@ericwill ericwill mentioned this issue Mar 18, 2021
46 tasks
@ericwill ericwill added this to the 7.29 milestone Mar 24, 2021
@ericwill ericwill modified the milestones: 7.29, 7.30 Apr 14, 2021
@ericwill ericwill modified the milestones: 7.30, 7.31 Apr 27, 2021
@ericwill ericwill mentioned this issue Apr 29, 2021
32 tasks
@svor svor closed this as completed May 7, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/plugins kind/bug Outline of a bug - must adhere to the bug report template. severity/P2 Has a minor but important impact to the usage or development of the system. sprint/current
Projects
None yet
Development

No branches or pull requests

2 participants