-
Notifications
You must be signed in to change notification settings - Fork 72
/stats/summary returned HTTP status 401 Unauthorized #77
Comments
@casertap when I wrote these charts |
@casertap I don't suppose you're running this on GKE? |
@rawkode no I built my own kube cluster on aws using kops |
@casertap Please ensure you have Webhook authentication enabled in your Kubelet configuration:
|
@rawkode I'm having this issue while running on GKE, any ideas? Tried with --authentication-token-webhook on kubelet and have created a serviceaccount. Same config works on non-gke setup. |
@niklasember GKE doesn't allow access to Kubelet on the host, you need to go through API Server
|
@jackzampolin do you have an example how to configure the role for the service account? |
I've found a solution that works for me:
|
We should update the |
@florianrusch I agree. We're working on cleaning up our Helm charts and will be supporting / endorsing the charts in the official Helm repository very soon |
@florianrusch Would it be possible for you to list out the steps that you followed to get the service account working for you? |
@piyush-insider I didn't test it again. But I've took the resources I've published before and just applied them to the cluster/namespace. You can put the resources in a $ cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: ServiceAccount
metadata:
name: tick-stack
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: metric-scanner-kubelet-api-admin
subjects:
- kind: ServiceAccount
name: tick-stack
namespace: tick
roleRef:
kind: ClusterRole
name: system:kubelet-api-admin
apiGroup: rbac.authorization.k8s.io
EOF |
Apart from service account specification (which also requires #105) you'll need to provide adequate For
|
Using this config in
telegraf-ds
I get this error:
It seems that I am missing the
serviceaccount
token fortelegraf
to query the kubernetes endpoint.I find it weird that the tick-charts did not create this serviceaccount automatically.
What am I missing? How can I make the inputs.kubernetes work?
The text was updated successfully, but these errors were encountered: