In my GKE cluster, I installed the application redis-ha with Cloud monitoring metrics enabled for it, it is giving me error
: "Error while sending request to Stackdriver googleapi: Error 403: Permission monitoring.timeSeries.create denied (or the resource may not exist)., forbidden"
My node's service account has the Monitoring Metric Writer role and Monitoring API is also enabled in the required project.
What am I missing here, can anyone guide me here
Hi @nikhildobriyal,
Welcome to the Google Cloud Community!
Can you give the service account associated with your node and the default Compute Engine service account these roles:
-roles/logging.logWriter
-roles/monitoring.metricWriter
-roles/monitoring.viewer
Let me know if it worked. Thank you.
The node's service account already has these roles :-
Container Registry Service Agent
gke_storage_role (a custom role)
Logs Writer
Monitoring Metric Writer
Stackdriver Resource Metadata Writer
it just doesn't have
-roles/monitoring.viewer
role, which is just a monitoring viewer role which might not cause this problem, but I would apply this and let you know if this solves the problem or not.
I have given -roles/monitoring.viewer role, the pods are still throwing same errors
: "Error while sending request to Stackdriver googleapi: Error 403: Permission monitoring.timeSeries.create denied (or the resource may not exist)., forbidden"