Prometheus-Operator监控kube-controller-manager失败

[comeonyang43]

1）问题描述：k8s版本1.22.4，kube-controller-manager监听端口10257.监控Target页面显示DOWN,错误提示server returned HTTP status 403 Forbidden.点击metrics url 提示： { "kind": "Status", "apiVersion": "v1", "metadata": {

}, "status": "Failure", "message": "forbidden: User "system:anonymous" cannot get path "/metrics"", "reason": "Forbidden", "details": {

}, "code": 403 }

2）prometheus values文件相关部分配置： kubeControllerManager: enabled: true endpoints:

• 192.168.20.128 service: enabled: true port: 10257 targetPort: 10257 serviceMonitor: enabled: true https: true insecureSkipVerify: true

[tanmx]

同样的问题 kube-scheduler 的 10259 端口也是一样的问题

kubeControllerManager:
  enabled: true
  ## If your kube controller manager is not deployed as a pod, specify IPs it can be found on
  ##
  endpoints:
    - x.x.x.x
  service:
    port: 10257
    targetPort: 10257
  serviceMonitor:
    https: true
    insecureSkipVerify: true

kubeScheduler:
  enabled: true
  ## If your kube scheduler is not deployed as a pod, specify IPs it can be found on
  ##
  endpoints:
    - x.x.x.x
  service:
    enabled: true
    port: 10259
    targetPort: 10259
  serviceMonitor:
    https: true
    insecureSkipVerify: true

[cctvto]

kube-controller-manager 启动参数增加下面两行就可以了 --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf

[tanmx]

@cctvto 感谢，问题已经解决 kube-controller-manager 启动参数增加

  --authentication-kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig \
  --authorization-kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig

kube-scheduler 启动参数增加

  --authentication-kubeconfig=/etc/kubernetes/kube-scheduler.kubeconfig \
  --authorization-kubeconfig=/etc/kubernetes/kube-scheduler.kubeconfig

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.

[zyy2477]

kube-controller-manager 启动参数增加下面两行就可以了 --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf

感谢，问题解决