GKE 未捕获任何应用程序日志

Question

新的 GKE 集群将 Cloud Operations for GKE 设置为系统和工作负载日志记录和监控，但没有显示任何应用程序日志。当我检查 kube-system 中已安装的 fluentbit-gke 时，我一遍又一遍地注意到同样的错误。

1server.go:47] Configured Fluent Bit GKE plugin server to run on the port 2021
server.go:139] Failed to process request: saw 1 errors; last: rpc error: code = PermissionDenied desc = The caller does not have permission
server.go:139] Failed to process request: saw 1 errors; last: rpc error: code = PermissionDenied desc = The caller does not have permission
server.go:139] Failed to process request: saw 1 errors; last: rpc error: code = PermissionDenied desc = The caller does not have permission
server.go:139] Failed to process request: saw 1 errors; last: rpc error: code = PermissionDenied desc = The caller does not have permission

Answer 1

您可能需要检查您的集群是否符合以下几点：

• 其节点池应将 Stackdriver Logging API 访问范围设置为“只写”或“完整”。
• 在节点池级别配置的服务帐号应具有联系 Stackdriver API 所需的角色/权限。