From aff318edead4d6bc5b022f5a96003d0ed7474470 Mon Sep 17 00:00:00 2001 From: Saverio Proto Date: Tue, 24 Jul 2018 12:58:40 +0200 Subject: [PATCH] metrics-server: enable access to nodes/stats Without this access the logs of metrics-server will show the following error line: ``` unable to fully scrape metrics from source kubelet_summary:k8s-1: unable to fetch metrics from Kubelet k8s-1 (10.8.10.14): request failed - "403 Forbidden", response: "Forbidden (user=system:serviceaccount:kube-system:metrics-server, verb=get, resource=nodes, subresource=stats)", ``` and `kubectl top nodes` will give no results --- .../experimental/metrics-server/metrics-server-cluster-role.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/contrib/kube-prometheus/experimental/metrics-server/metrics-server-cluster-role.yaml b/contrib/kube-prometheus/experimental/metrics-server/metrics-server-cluster-role.yaml index 6976f5ce0..38844d9a6 100644 --- a/contrib/kube-prometheus/experimental/metrics-server/metrics-server-cluster-role.yaml +++ b/contrib/kube-prometheus/experimental/metrics-server/metrics-server-cluster-role.yaml @@ -8,6 +8,7 @@ rules: resources: - pods - nodes + - nodes/stats - namespaces verbs: - get