Comments (16)
Wonderful, thanks.
In general, we're figuring out how to better support enterprise environments (w/ limited permissions and organizational difficulties in actually getting KRR's recommendations applied after a scan). If you're open to it, would love to chat and get feedback on related areas.
from krr.
#48 I had a similar challenge so have opened a PR.
from krr.
Hello, I am not sure this is fully fixed,
Launching it today from a clone that includes this supposed fix commit, with command
python krr.py simple --namespace cclexploit-monitoring
I get the error below that shows that cluster scope requests are still made, here it's a get services
which I am allowed on kubectl if i stay in my namespace.
ApiException: (403)
Reason: Forbidden
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"services is forbidden: User \"https://xxx/dex#ecourreges\" cannot list
resource \"services\" in API group \"\" at the cluster scope","reason":"Forbidden","details":{"kind":"services"},"code":403}
from krr.
Can you try the lastest commit on #220?
I've added a fix for the HPA there.
Thanks for the patience!
from krr.
Update on this one: @mnbbrown has done a great job, but he did not sign the CLA so we can not merge it
We really hope he will come back, if not - we will make another PR
from krr.
same issue with me !!
from krr.
can someone merge the PR of @mnbbrown please
from krr.
Hey all, we'd really like to merge but like most open source projects, we require a CLA signature before we can merge.
@mnbbrown if you have questions regarding the CLA, let me know.
The PR needs some updating due to recent changes we made elsewhere, but we can handle that on our end.
from krr.
@aantn Yes if you cant handle it it will be a pleasure thanks to try it
from krr.
I got the same issue while listing resources for Services
from krr.
Encountering the same issue
from krr.
Does #220 fix this?
from krr.
Does #220 fix this?
It improves for sure compared to the main branch, now it does display the table of deployments for the namespace correctly, but it still tries to get HPA at cluster scope which is not allowed:
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"horizontalpodautoscalers.autoscaling is forbidden: User
\"https://mysite.com/dex#myuser\" cannot list resource \"horizontalpodautoscalers\" in API group \"autoscaling\" at the cluster
scope","reason":"Forbidden","details":{"group":"autoscaling","kind":"horizontalpodautoscalers"},"code":403}
from krr.
Does #220 fix this?
It improves for sure compared to the main branch, now it does display the table of deployments for the namespace correctly, but it still tries to get HPA at cluster scope which is not allowed:
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"horizontalpodautoscalers.autoscaling is forbidden: User \"https://mysite.com/dex#myuser\" cannot list resource \"horizontalpodautoscalers\" in API group \"autoscaling\" at the cluster scope","reason":"Forbidden","details":{"group":"autoscaling","kind":"horizontalpodautoscalers"},"code":403}
from krr.
Can you try the lastest commit on #220? I've added a fix for the HPA there.
Thanks for the patience!
Good job, it works for me with no error now!
from krr.
Wonderful, thanks.
In general, we're figuring out how to better support enterprise environments (w/ limited permissions and organizational difficulties in actually getting KRR's recommendations applied after a scan). If you're open to it, would love to chat and get feedback on related areas.
I sent you a message on linkedIn for follow-up, happy to help.
from krr.
Related Issues (20)
- Prometheus returned no PercentileCPULoader metrics with the simple strategy HOT 3
- v1.9.0 not released to brew due to failed github action HOT 3
- Binaries missing for 1.9.0 HOT 3
- Add support for Windows Containers HOT 1
- CSV export format improvement HOT 1
- Add flags for controlling the memory buffer applied over the maximum value recorded HOT 4
- Algorithm CPU percentil in documentation correct? HOT 1
- Version check is broken on dev versions
- Automatic connection to Prometheus doesn't work on k3s from outside the cluster
- KRR computes recommendation for lots of Kubernetes objects, but if just one errors out no results are printed HOT 5
- Custom selector for prometheus service auto discovery HOT 3
- All pods are reported as `"deleted": true` even if still running HOT 1
- Support for oom_memory_buffer_percentage=0 HOT 1
- Unable to get history range from VictoriaMetrics HOT 3
- --resource flag broken in 1.11.0 HOT 1
- Remote end closed connection without response
- [v1.12.0-main] - ERROR - CERTIFICATE_VERIFY_FAILED certificate trying Recommendations HOT 4
- History duration flag is not working in version v1.11.0-3-g2e8278c-main-dirty
- About memory requests and limits calculation HOT 4
- HTTP Status Code 400 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from krr.