During Kubernetes (Prometheus) integration, you receive the error: 'Credentials provided do not have "Read" access to the cluster'

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

1. You attempt to integrate Aria Operations with your existing Prometheus setup in the Kubernetes cluster.

2. You have created the appropriate cluster role and cluster role bindings for your service account, but you are receiving the error: Credentials provided do not have "Read" access to the cluster.

Environment

Aria Operations 8.18.x

Aria Operations Management Pack for Kubernetes 2.2

Cause

Misconfiguration in the YAML file for the Token Auth.

Resolution

Refer to Token Auth in Configuring VMware Aria Operations Management Pack for Kubernetes, and make sure all fields are correct.

For example:

1. Keep "/" under nonResourceURLs. Do not add additional variables. 

2. Make sure the namespace values are configured correctly based on the Sample YAML file as noted in the above documentation. The default values are either '*' or default.

3. Double-check any other fields.

4. Reapply the file as instructed by the above documentation.

5. Note the bearer token from step 4.

6. Go to Administration > Integrations> Kubernetes instance, click Edit,  select the credential by following Step 4 in Configure Integration with Tanzu Kubernetes Grid for Token Auth.