Kubernetes Monitoring Help

[itsmebalaji]

We are trying to setup monitoring for the kubernetes with the available documentation , & been getting the below error

Reason: Forbidden
HTTP response headers: HTTPHeaderDict({‘Cache-Control’: ‘no-cache, private’, ‘Content-Type’: ‘application/json’, ‘X-Content-Type-Options’: ‘nosniff’, ‘Date’: ‘Fri, 11 Sep 2020 06:56:49 GMT’, ‘Content-Length’: ‘269’})
HTTP response body: {“kind”:“Status”,“apiVersion”:“v1”,“metadata”:{},“status”:“Failure”,“message”:“forbidden: User “system:serviceaccount:check-mk:check-mk” cannot get path “/k8s/clusters/kubernetes/apis/storage.k8s.io/v1/storageclasses””,“reason”:“Forbidden”,“details”:{},“code”:403}

[martin.hirschvogel]

Which version of Kubernetes are you using? I had issues with 1.18 as they changed the API and the Python package everyone uses, is not up-to-date yet.

[itsmebalaji]

Hey Martin ,

Client Version: v1.15.4
Server Version: v1.15.12

[wittmannthom (ThomasW)]

Hi
the http status code says 403. That indicates that the service account which has to be created has not the sufficient rights to access the cluster

BR
Thomas

[itsmebalaji]

Hi Thoma ,

I just followed the instructions available as per the check_mk document & used the rbac available in github , still struggling to pass the sufficient access

even tried the default service account , but of no luck

[wittmannthom (ThomasW)]

Did you convert the Cert and token correctly as described?

BR