:bug: failed to get kubelet config for summary api, error: Forbidden (user=system:serviceaccount:katalyst-system:katalyst-agent, verb=get, resource=nodes, subresource=stats)"

[kingeasternsun]

What happened?

when i install overcommit

 helm install overcommit -n katalyst-system --create-namespace kubewharf/katalyst-overcommit --set katalyst-agent.customArgs.sysadvisor-plugins="-overcommit-aware"

I got error

failed to update stats/summary from kubelet: "failed to get kubelet config for summary api, error: Forbidden (user=system:serviceaccount:katalyst-system:katalyst-agent, verb=get, resource=nodes, subresource=stats)"

the reason is that clusterole katalyst-agent lack this, when I add it back, katalyste-agent works.
···

• apiGroups:
  • ""
    resources:
  • nodes/stats
    verbs:
  • get
    ···

What did you expect to happen?

access the kubelet summary api success

How can we reproduce it (as minimally and precisely as possible)?

just install

 helm install overcommit -n katalyst-system --create-namespace kubewharf/katalyst-overcommit --set katalyst-agent.customArgs.sysadvisor-plugins="-overcommit-aware"

Software version

Details

v5.0