Sentry pod cannot access needed k8s APIs
Closed this issue · 1 comments
askdesigners commented
Environment
How do you use Sentry?
Sentry SaaS (sentry.io)
Which SDK and version?
Latest node.js
Steps to Reproduce
- Ran the script give in the readme to add a pod to my deployment
Expected Result
That it would work. :)
Actual Result
I see these logs over and over in the pod
HTTP response body: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"events is forbidden: User \\"system:serviceaccount:default:default\\" cannot watch resource \\"events\\" in API group \\"\\" at the cluster scope","reason":"Forbidden","details":{"kind":"events"},"code":403}\n'
2021-12-21 15:03:52,591 Exception when calling CoreV1Api->list_event_for_all_namespaces: (403)
Reason: Forbidden
This is a cluster running in DO cloud if it helps.
Frankkkkk commented
Hi,
You're surely missing some rbac rights.
This project includes an helm chart: https://github.com/sentry-kubernetes/charts/tree/develop/sentry-kubernetes
Cheers