首页 文章

Stackdriver监控,未授权完全访问范围

提问于
浏览
4

部署具有完整API访问权限并安装Stackdriver代理的全新Google Compute Engine实例后,Monitoring不显示代理的任何指标 .

根据Install Agent手册,不需要进一步设置(如手动配置API密钥) .

代理服务状态还显示以下错误:

$ systemctl status stackdriver-agent
Jul 13 10:14:00 host stackdriver-agent[21203]: [  OK  ]
Jul 13 10:14:00 host systemd[1]: Started LSB: start and stop Stackdriver Agent.
Jul 13 10:14:00 host collectd[21226]: Initialization complete, entering read-loop.
Jul 13 10:14:00 host collectd[21226]: match_throttle_metadata_keys: 1 history entries, 1 distinct keys, 46 bytes server memory.
Jul 13 10:14:00 host collectd[21226]: tcpconns plugin: Reading from netlink succeeded. Will use the netlink method from now on.
Jul 13 10:14:00 host collectd[21226]: write_gcm: Asking metadata server for auth token
Jul 13 10:14:01 host collectd[21226]: write_gcm: Unsuccessful HTTP request 403: {
                                               "error": {
                                                 "code": 403,...
Jul 13 10:14:01 host collectd[21226]: write_gcm: Error talking to the endpoint.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segment failed.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segments failed. Flushing.

Google Cloud Console显示具有以下内容的实例:

Cloud API access scopes
This instance has full API access to all Google Cloud services.

并在实例中运行以下命令显示:

$ curl --silent -f -H "Metadata-Flavor: Google" http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/scopes
https://www.googleapis.com/auth/cloud-platform

什么出错了?

1 回答

  • 6

    我想到了:

    您必须在 API Manager 中启用 Google Monitoring API ,默认情况下不启用 . 无需指定API密钥,即可获取默认的应用程序凭据 .

    有趣的是,我有两个项目也从今年年初开始使用Stackdriver Monitoring,并且不需要启用Google Monitoring API .

相关问题