Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VSphere integration dies when permission denied on some resources #17445

Open
dmartin-isp opened this issue Apr 24, 2024 · 0 comments
Open

VSphere integration dies when permission denied on some resources #17445

dmartin-isp opened this issue Apr 24, 2024 · 0 comments

Comments

@dmartin-isp
Copy link

dmartin-isp commented Apr 24, 2024

Note: If you have a feature request, you should contact support so the request can be properly tracked.

Output of the info page

Sorry, we found work-around before gathering this.

Additional environment details (Operating System, Cloud provider, etc):

Steps to reproduce the issue:

  1. Have a read-only user without read permission to some resources (don't know exactly which)
  2. try to run the vsphere integration using that user
  3. get no metrics, see errors in logs

Describe the results you received:

pyVmomi.VmomiSupport.vim.fault.NoPermission: (vim.fault.NoPermission) {
   dynamicType = <unset>,
   dynamicProperty = (vmodl.DynamicProperty) [],
   msg = 'Permission to perform this operation was denied.',
   faultCause = <unset>,
   faultMessage = (vmodl.LocalizableMessage) [],
   object = 'vim.Folder:group-d1',
   privilegeId = 'System.Read',
   missingPrivileges = (vim.fault.NoPermission.EntityPrivileges) [
      (vim.fault.NoPermission.EntityPrivileges) {
         dynamicType = <unset>,
         dynamicProperty = (vmodl.DynamicProperty) [],
         entity = 'vmodl.query.PropertyCollector:propertyCollector',
         privilegeIds = (str) [
            'System.Read'
         ]
      }
   ]
}
"}]

No vsphere metrics sent.

Describe the results you expected:
Unreadable resources should be gracefully skipped. I should get metrics for resources I do have read access to.

Additional information you deem important (e.g. issue happens only occasionally):
Got the admins to give us global read-only access, and that "solved" the problem.
Authentication definitely working. Using a wrong password results in a completely different error message.

@dmartin-isp dmartin-isp changed the title VSphere integration dies when permission denied VSphere integration dies when permission denied on some resources Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant