You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Using the provided yaml results in (GKE v1.12.9-gke.7):
E0902 08:12:44.409083 1 reflector.go:190] github.com/GoogleCloudPlatform/k8s-stackdriver/event-exporter/watchers/watcher.go:50: Failed to list *v1.Event: events is forbidden: User "system:serviceaccount:devops:event-exporter-sa" cannot list resource "events" in API group "" at the cluster scope
Looking a bit deeper this scop of this guide is probably outdated because the exporter is already installed in the kube-system namespace! Stackdriver instructions are out of date as well and events appear in:
GKE Cluster Operations
NOT:
GKE Cluster
@kribor Thank you for reporting this issue! We are in the process of removing third-party content, which includes this Stackdriver page. See PRs #15748 and #16203. So I'm closing this Issue. Thanks.
/close
@kribor Thank you for reporting this issue! We are in the process of removing third-party content, which includes this Stackdriver page. See PRs #15748 and #16203. So I'm closing this Issue. Thanks.
/close
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
Using the provided yaml results in (GKE v1.12.9-gke.7):
E0902 08:12:44.409083 1 reflector.go:190] github.com/GoogleCloudPlatform/k8s-stackdriver/event-exporter/watchers/watcher.go:50: Failed to list *v1.Event: events is forbidden: User "system:serviceaccount:devops:event-exporter-sa" cannot list resource "events" in API group "" at the cluster scope
After modifying the clusterrolebinding to:
it apparently work but these permission might be too wide.
The text was updated successfully, but these errors were encountered: