Skip to content

Conversation

@rowezuniga
Copy link
Contributor

@rowezuniga rowezuniga commented Sep 24, 2025

The ClusterRoleBinding should use a custom namespace if it's specified. If gremlin is configured with a custom namespace, the gremlin agent cannot fetch the node's topology zone/region labels and the log will show:

Before (can't fetch the node's metadata to fetch the zone/region information):

[WARN] gremlin_common::client::metadata::kube - Failed to get labels for Kubernetes node '<node>': nodes "<node>" is forbidden: User "system:serviceaccount:<custom-namespace>:gremlin" cannot get resource "nodes" in API group "" at the cluster scope: Forbidden. Check the permissions in the helm chart.

After (the zone/region tags are set):

Metadata set for [ zone: <zone> ]
Metadata set for [ region: <region> ]

@rowezuniga rowezuniga requested review from a team as code owners September 24, 2025 23:01
@rowezuniga rowezuniga merged commit edb5ac1 into master Sep 25, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants