Magnum

Prometheus is missing RBAC config

Bug #1755772 reported by Feilong Wang
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Magnum
Fix Released
Undecided
Feilong Wang

Bug Description

Error is as below:

time="2018-03-14T10:04:22Z" level=error msg="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:267: Failed to list *v1.Node: nodes is forbidden: User "system:serviceaccount:kube-system:default" cannot list nodes at the cluster scope" component="kube_client_runtime" source="kubernetes.go:76"

Feilong Wang (flwang)
Changed in magnum:
assignee: nobody → Feilong Wang (flwang)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (master)

Fix proposed to branch: master
Review: https://review.openstack.org/553654

Changed in magnum:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (master)

Reviewed: https://review.openstack.org/553654
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=d07fb7f3cc0c16ad597e930c37b042c26ac78049
Submitter: Zuul
Branch: master

commit d07fb7f3cc0c16ad597e930c37b042c26ac78049
Author: Feilong Wang <email address hidden>
Date: Thu Mar 15 14:36:17 2018 +1300

    Add missing RBAC config for Prometheus

    Currently the prometheus service is broken because the RBAC config is
    missing. The patch just adds it to make it work again.

    And the namespace of prometheus and grafana are also changed in this
    patch to get a better isolation.

    Closes-Bug: #1755772

    Change-Id: I05affd9091ad13d70cc074b45d204162f2f4b21e

Changed in magnum:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/561906

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (stable/queens)

Reviewed: https://review.openstack.org/561906
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=fca7f0c9649abcc3e7f829a5c6edf05b0c797c90
Submitter: Zuul
Branch: stable/queens

commit fca7f0c9649abcc3e7f829a5c6edf05b0c797c90
Author: Feilong Wang <email address hidden>
Date: Thu Mar 15 14:36:17 2018 +1300

    Add missing RBAC config for Prometheus

    Currently the prometheus service is broken because the RBAC config is
    missing. The patch just adds it to make it work again.

    And the namespace of prometheus and grafana are also changed in this
    patch to get a better isolation.

    Closes-Bug: #1755772

    Change-Id: I05affd9091ad13d70cc074b45d204162f2f4b21e
    (cherry picked from commit d07fb7f3cc0c16ad597e930c37b042c26ac78049)

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 6.1.1

This issue was fixed in the openstack/magnum 6.1.1 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 7.0.0

This issue was fixed in the openstack/magnum 7.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.