I have applied it as it is in the docs. By applying it like this, I get the error:
[agent] Version: 2.0.0p21, OS: linux, [special_kubernetes] Agent exited with code 1: (403)
Reason: Forbidden
HTTP response headers: HTTPHeaderDict({'Audit-Id': '41c24c2e-c0fb-4b70-93bb-a612af3e4d02', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Content-Type-Options': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': 'a675563a-23a7-4108-8990-ccfa2a5c51cb', 'X-Kubernetes-Pf-Prioritylevel-Uid': '7458550b-fa57-48c4-b9a5-365d3b25f1de', 'Date': 'Mon, 02 May 2022 09:48:29 GMT', 'Content-Length': '321'})
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"apis \\"storage.k8s.io\\" is forbidden: User \\"system:serviceaccount:check-mk:check-mk\\" cannot get resource \\"apis/v1\\" in API group \\"\\" at the cluster scope","reason":"Forbidden","details":{"name":"storage.k8s.io","kind":"apis"},"code":403}**CRIT** , execution time 1.4 sec
And when I have applied this config and run kubectl auth can-i get all --as=system:serviceaccount:check-mk:check-mk I also always receive yes. (I can use at “all” any verbs of K8S)
By changing the ClusterRole (apiGroups= * , resources= * ,) i get the error:
[agent] Version: 2.0.0p21, OS: linux, [special_kubernetes] Agent exited with code 1: (404)
Reason: Not Found
HTTP response headers: HTTPHeaderDict({'Audit-Id': 'b6d85c96-1c11-48ba-bb47-46c8cc203abe', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Kubernetes-Pf-Flowschema-Uid': 'a675563a-23a7-4108-8990-ccfa2a5c51cb', 'X-Kubernetes-Pf-Prioritylevel-Uid': '7458550b-fa57-48c4-b9a5-365d3b25f1de', 'Date': 'Mon, 02 May 2022 09:50:22 GMT', 'Content-Length': '174'})
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"the server could not find the requested resource","reason":"NotFound","details":{},"code":404}CRIT, execution time 0.8 sec
Disabling SSL doesn’t change anything.