cannot list resource "replicasets" in API group "apps" at the cluster scope
prashant-shahi opened this issue · 1 comments
prashant-shahi commented
After bumping up otel-collector version to v0.79.x, we have been seeing the issue.
OtelCollector and OtelCollectorMetrics logs:
W0708 18:25:16.003276 1 reflector.go:533] pkg/mod/k8s.io/client-go@v0.27.2/tools/cache/reflector.go:231: failed to list *v1.ReplicaSet: replicasets.apps is forbidden: User "system:serviceaccount:platform:my-release-signoz-otel-collector" cannot list resource "replicasets" in API group "apps" at the cluster scope
E0708 18:25:16.003304 1 reflector.go:148] pkg/mod/k8s.io/client-go@v0.27.2/tools/cache/reflector.go:231: Failed to watch *v1.ReplicaSet: failed to list *v1.ReplicaSet: replicasets.apps is forbidden: User "system:serviceaccount:platform:my-release-signoz-otel-collector" cannot list resource "replicasets" in API group "apps" at the cluster scope
arrowcircle commented
Have the same issue with AWS EKS cluster, looks like collector cant access Kube API if created in namespace. Other projects/collectors have something like:
rbac:
namespaced: false
but support is required in the helm chart.