fix(metrics): add permissions for usage/utilization metrics

dash0hq · Dec 2, 2024 · 5fb536e · 5fb536e
1 parent 8dd92e2
commit 5fb536e
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 1 deletion.
diff --git a/helm-chart/dash0-operator/templates/operator/cluster-roles.yaml b/helm-chart/dash0-operator/templates/operator/cluster-roles.yaml
@@ -238,6 +238,12 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/proxy
+  verbs:
+  - get
 - apiGroups:
   - apps
   resources:

diff --git a/helm-chart/dash0-operator/tests/operator/__snapshot__/cluster-roles_test.yaml.snap b/helm-chart/dash0-operator/tests/operator/__snapshot__/cluster-roles_test.yaml.snap
@@ -200,6 +200,12 @@ cluster roles should match snapshot:
           - get
           - list
           - watch
+      - apiGroups:
+          - ""
+        resources:
+          - nodes/proxy
+        verbs:
+          - get
       - apiGroups:
           - apps
         resources:

diff --git a/internal/backendconnection/otelcolresources/daemonset.config.yaml.template b/internal/backendconnection/otelcolresources/daemonset.config.yaml.template
@@ -122,7 +122,10 @@ receivers:
   kubeletstats:
     auth_type: serviceAccount
     collection_interval: 20s
-    endpoint: ${env:K8S_NODE_NAME}:10250
+    endpoint: '${env:K8S_NODE_NAME}:10250'
+    node: '${env:K8S_NODE_NAME}'
+    k8s_api_config:
+      auth_type: serviceAccount
     metrics:
       # deprecated -> container.cpu.usage
       container.cpu.utilization:

diff --git a/internal/backendconnection/otelcolresources/desired_state.go b/internal/backendconnection/otelcolresources/desired_state.go
@@ -329,6 +329,14 @@ func assembleClusterRoleForDaemonSet(config *oTelColConfig) *rbacv1.ClusterRole
 				},
 				Verbs: []string{"get", "watch", "list"},
 			},
+			{
+				APIGroups: []string{""},
+				Resources: []string{
+					// required for Kubeletstats receiver ({request|limit}_utilization metrics)
+					"nodes/proxy",
+				},
+				Verbs: []string{"get"},
+			},
 			{
 				APIGroups: []string{"apps"},
 				Resources: []string{"replicasets"},