https://signoz.io
Join Slack
This message was deleted.
# support
s
This message was deleted.
s
@Prashant Shahi can help with this. I don’t think we have tested the autopilot mode.
p
Hi @Pierre Filliolaud, I don't think log collection would be possible in OtelCollector at the moment for GKE autopilot. You will need to disable the log collection. You can do that by including the below in `override-values.yaml`:
Copy code
k8s-infra:
  presets:
    logsCollection:
      enabled: false
You might also have to switch to readonly kubelet endpoint:
Copy code
k8s-infra:
  presets:
    kubeletMetrics:
      authType: none
      endpoint: ${K8S_NODE_NAME}:10255
p
Thank you @Prashant Shahi I am going to test
I set the override-values.yaml with
Copy code
global:
  storageClass: gce-resizable

clickhouse:
  cloud: gcp
  installCustomStorageClass: true
k8s-infra:
  presets:
    logsCollection:
      enabled: false
    kubeletMetrics:
      authType: none
      endpoint: ${K8S_NODE_NAME}:10255
and I am still getting the error
Copy code
Error: INSTALLATION FAILED: admission webhook "<http://gkepolicy.common-webhooks.networking.gke.io|gkepolicy.common-webhooks.networking.gke.io>" denied the request: GKE Warden rejected the request because it violates one or more policies: {"[denied by autogke-no-host-port]":["container signoz-app-k8s-infra-otel-agent specifies a host port; disallowed in Autopilot. Requested by user: 'xxx@xxx.xx', groups: 'system:authenticated'."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume varlibdockercontainers used in container signoz-app-k8s-infra-otel-agent uses path /var/lib/docker/containers which is not allowed in Autopilot. Allowed path prefixes for hostPath volumes are: [/var/log/]. Requested by user: 'xxx@xxx.xx', groups: 'system:authenticated'."]}
p
@Pierre Filliolaud I see that Autopilot has some security limitations which is causing this. Unfortunately, it will require some changes and experiments from our side to confirm that it works GKE Autopilot. Can you create an issue in SigNoz charts repo for this? I will discuss with our team and see if this can be prioritised. Ref: https://cloud.google.com/kubernetes-engine/docs/concepts/daemonset#autopilot-ds-best-practices
cc @Ankit Nayan
p
tks you
8 Views
Open in Slack
PreviousNext
Powered by

SigNoz Community

SigNoz is an open-source APM. It helps developers monitor their applications & troubleshoot problems, an open-source alternative to DataDog, NewRelic, etc.

Powered by