{"action":"created","issue":{"url":"https://api.github.com/repos/jenkins-x/jx/issues/459","repository_url":"https://api.github.com/repos/jenkins-x/jx","labels_url":"https://api.github.com/repos/jenkins-x/jx/issues/459/labels{/name}","comments_url":"https://api.github.com/repos/jenkins-x/jx/issues/459/comments","events_url":"https://api.github.com/repos/jenkins-x/jx/issues/459/events","html_url":"https://github.com/jenkins-x/jx/issues/459","id":307113387,"node_id":"MDU6SXNzdWUzMDcxMTMzODc=","number":459,"title":"Heapster is missing permissions","user":{"login":"JinsYin","id":12714609,"node_id":"MDQ6VXNlcjEyNzE0NjA5","avatar_url":"https://avatars1.githubusercontent.com/u/12714609?v=4","gravatar_id":"","url":"https://api.github.com/users/JinsYin","html_url":"https://github.com/JinsYin","followers_url":"https://api.github.com/users/JinsYin/followers","following_url":"https://api.github.com/users/JinsYin/following{/other_user}","gists_url":"https://api.github.com/users/JinsYin/gists{/gist_id}","starred_url":"https://api.github.com/users/JinsYin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JinsYin/subscriptions","organizations_url":"https://api.github.com/users/JinsYin/orgs","repos_url":"https://api.github.com/users/JinsYin/repos","events_url":"https://api.github.com/users/JinsYin/events{/privacy}","received_events_url":"https://api.github.com/users/JinsYin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-03-21T03:57:58Z","updated_at":"2018-09-24T03:43:40Z","closed_at":null,"author_association":"NONE","body":"```bash\r\n$ kubectl get pod,pvc -n jx\r\nNAME                                                READY     STATUS    RESTARTS   AGE\r\npo/jenkins-668bd9bdcb-psv5w                         1/1       Running   0          1h\r\npo/jenkins-x-chartmuseum-77dcdf7f87-xf9nj           1/1       Running   0          2h\r\npo/jenkins-x-docker-registry-55fb758fb5-4mvmj       1/1       Running   0          2h\r\npo/jenkins-x-heapster-f87958c5b-wwf5s               2/2       Running   0          1h\r\npo/jenkins-x-mongodb-5fb7868bd-p98cg                1/1       Running   0          2h\r\npo/jenkins-x-monocular-api-fd466b6c7-qz5k6          1/1       Running   8          2h\r\npo/jenkins-x-monocular-prerender-74f49ffdc7-hspsk   1/1       Running   0          2h\r\npo/jenkins-x-monocular-ui-5dcfbf9d7c-5lz87          1/1       Running   0          2h\r\npo/jenkins-x-nexus-6f6dd547b7-2pqgc                 1/1       Running   0          2h\r\npo/pipelinecontroller-5c5f5df7ff-nb8fd              1/1       Running   0          2h\r\n\r\nNAME                        STATUS    VOLUME                                     CAPACITY   ACCESSMODES   STORAGECLASS   AGE\r\npvc/jenkins                 Bound     pvc-ebd68a42-2ca9-11e8-8d5d-d4bed9ee2059   30Gi       RWO           rbd            2h\r\npvc/jenkins-x-chartmuseum   Bound     pvc-ebd5f09f-2ca9-11e8-8d5d-d4bed9ee2059   8Gi        RWO           rbd            2h\r\npvc/jenkins-x-mongodb       Bound     pvc-ebd72826-2ca9-11e8-8d5d-d4bed9ee2059   8Gi        RWO           rbd            2h\r\npvc/jenkins-x-nexus         Bound     pvc-ebd81dc3-2ca9-11e8-8d5d-d4bed9ee2059   8Gi        RWO           rbd            2h\r\n```\r\n\r\n```bash\r\n$ kubectl logs -n jx -f jenkins-x-heapster-f87958c5b-wwf5s -c heapster\r\nE0321 02:36:32.134283       1 reflector.go:190] k8s.io/heapster/metrics/util/util.go:51: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\nE0321 02:36:32.980072       1 reflector.go:190] k8s.io/heapster/metrics/util/util.go:51: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\nE0321 02:36:32.980920       1 reflector.go:190] k8s.io/heapster/metrics/heapster.go:322: Failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:jx:default\" cannot list pods at the cluster scope\r\nE0321 02:36:33.033546       1 reflector.go:190] k8s.io/heapster/metrics/util/util.go:51: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\nE0321 02:36:33.134699       1 reflector.go:190] k8s.io/heapster/metrics/processors/namespace_based_enricher.go:84: Failed to list *v1.Namespace: namespaces is forbidden: User \"system:serviceaccount:jx:default\" cannot list namespaces at the cluster scope\r\n```\r\n\r\n```bash\r\n$ kubectl logs -n jx -f jenkins-x-heapster-f87958c5b-wwf5s -c heapster-nanny\r\nE0321 03:38:37.349965       1 reflector.go:205] k8s.io/contrib/addon-resizer/nanny/kubernetes_client.go:108: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\nE0321 03:38:38.351287       1 reflector.go:205] k8s.io/contrib/addon-resizer/nanny/kubernetes_client.go:108: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\nE0321 03:38:39.352778       1 reflector.go:205] k8s.io/contrib/addon-resizer/nanny/kubernetes_client.go:108: Failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:jx:default\" cannot list nodes at the cluster scope\r\n```"},"comment":{"url":"https://api.github.com/repos/jenkins-x/jx/issues/comments/423871427","html_url":"https://github.com/jenkins-x/jx/issues/459#issuecomment-423871427","issue_url":"https://api.github.com/repos/jenkins-x/jx/issues/459","id":423871427,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMzg3MTQyNw==","user":{"login":"htplbc","id":5052967,"node_id":"MDQ6VXNlcjUwNTI5Njc=","avatar_url":"https://avatars1.githubusercontent.com/u/5052967?v=4","gravatar_id":"","url":"https://api.github.com/users/htplbc","html_url":"https://github.com/htplbc","followers_url":"https://api.github.com/users/htplbc/followers","following_url":"https://api.github.com/users/htplbc/following{/other_user}","gists_url":"https://api.github.com/users/htplbc/gists{/gist_id}","starred_url":"https://api.github.com/users/htplbc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/htplbc/subscriptions","organizations_url":"https://api.github.com/users/htplbc/orgs","repos_url":"https://api.github.com/users/htplbc/repos","events_url":"https://api.github.com/users/htplbc/events{/privacy}","received_events_url":"https://api.github.com/users/htplbc/received_events","type":"User","site_admin":false},"created_at":"2018-09-24T03:43:40Z","updated_at":"2018-09-24T03:43:40Z","author_association":"NONE","body":"So #1705 references an issue with the service account and the clusterrolebinding ... to fix I ran the following... \r\n\r\n`kubectl create clusterrolebinding jenkins-jx-role-binding-2 --clusterrole=cluster-admin --user=system:serviceaccount:jx:jenkins-x-gc-activities --user=system:serviceaccount:jx:jenkins-x-gc-previews --user=system:serviceaccount:jx:default`\r\n\r\nThis took care of #1705 issue which unfortunately still exists on my version and this issue\r\n\r\n`jx version\r\nUsing helmBinary helm, with noTiller false\r\nNAME               VERSION\r\njx                 1.3.306\r\njenkins x platform 0.0.2544\r\nkubernetes cluster v1.10.3\r\nkubectl            v1.11.3\r\nhelm client        v2.10.0+g9ad53aa\r\nhelm server        v2.10.0+g9ad53aa\r\ngit                git version 2.19.0`\r\n"}}
{"actor":{"display_login":"htplbc"}}