Stackdriver监控,未授权完全访问范围

时间:2016-07-13 11:07:49

标签: google-compute-engine google-cloud-platform stackdriver

在部署具有完全API访问权限并安装Stackdriver代理的全新Google Compute Engine实例后,监控未显示代理的任何指标。

根据Install Agent手册,不需要进一步设置(例如手动配置API密钥)。

代理服务状态还显示以下错误:

$ systemctl status stackdriver-agent
Jul 13 10:14:00 host stackdriver-agent[21203]: [  OK  ]
Jul 13 10:14:00 host systemd[1]: Started LSB: start and stop Stackdriver Agent.
Jul 13 10:14:00 host collectd[21226]: Initialization complete, entering read-loop.
Jul 13 10:14:00 host collectd[21226]: match_throttle_metadata_keys: 1 history entries, 1 distinct keys, 46 bytes server memory.
Jul 13 10:14:00 host collectd[21226]: tcpconns plugin: Reading from netlink succeeded. Will use the netlink method from now on.
Jul 13 10:14:00 host collectd[21226]: write_gcm: Asking metadata server for auth token
Jul 13 10:14:01 host collectd[21226]: write_gcm: Unsuccessful HTTP request 403: {
                                               "error": {
                                                 "code": 403,...
Jul 13 10:14:01 host collectd[21226]: write_gcm: Error talking to the endpoint.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segment failed.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segments failed. Flushing.

Google Cloud Console显示具有以下内容的实例:

Cloud API access scopes
This instance has full API access to all Google Cloud services.

并在实例中运行以下命令:

$ curl --silent -f -H "Metadata-Flavor: Google" http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/scopes
https://www.googleapis.com/auth/cloud-platform

关于出了什么问题的任何想法?

1 个答案:

答案 0 :(得分:6)

我明白了:

您必须在Google Monitoring API中启用API Manager,默认情况下不会启用该$dataProvider= new ActiveDataProvider([ 'query' => User::find(), 'pagination' => false, ]); 。无需指定API密钥,即可获取默认的应用程序凭据。

有趣的是,我有两个项目也从今年年初开始使用Stackdriver Monitoring,那些的项目需要启用Google Monitoring API。