Kubernetes Cluster Monitoring as Non-Admin User

When you add your Kubernetes cluster to monitoring, dynamic groups are used to group the cluster resources. For more information, see Adding a Kubernetes Cluster to Monitoring.

Non-admin users can add Kubernetes clusters to monitoring using API keys with more granular access. These API keys should have access to at least one resource group, which provides the necessary permissions to configure monitoring for Kubernetes clusters. This significantly improves access control, as the dynamic groups are now linked to the resource groups that the API keys can access, based on view permissions.

Before non-admin users can add Kubernetes clusters to monitoring, several prerequisites need to be set up:

Enabling non-admin users to add a Kubernetes cluster to monitoring

1. Ensure that different device groups are created for non-admin users. For more information, see Adding Resource Groups.
2. Navigate to Settings > User Access > User and Roles.
3. Select the Roles tab.
4. Select the required role group and select the Manage icon.
5. In the Permissions tab, assign the required access to the Kubernetes cluster static groups.
   Note: You can create multiple users with specific roles from the Manage Role dialog box.
   When the required permissions are provided, the non-admin users can add and monitor the Kubernetes clusters within the static groups.
   
6. To create the required dashboard groups, in the top left of the Dashboards page, select the Add icon > Add dashboard group. Enter the required details. For more information, see Adding Dashboard Groups.
7. To create the required collector groups, navigate to Settings > Collectors.
8. Under the Collectors tab, select the Add Collector Options  dropdown. Enter the required details. For more information, see Adding Collector Groups.
9. Select the User Profile in the Permissions setting and grant non-admin users access to create API tokens and manage their profiles.
   

After a resource group is allocated, non-admin users can add Kubernetes clusters into monitoring.

Adding a Kubernetes Cluster into Monitoring as a Non-Admin User

1. Navigate to Resource Tree > Resources.
2. Select the allocated resource group to add to the cluster.
3. Select the Add icon and select Kubernetes Cluster.
   
4. On the Add Kubernetes Cluster page, add the following information:
   1. In the Cluster Name field, enter the cluster name.
   2. In the API token field, select the allocated resource group’s API token and Save.
      The other API Token field information populates automatically.
   3. In the Resource Group field, select the allocated resource group name
   4. In the Collector Group and Dashboard Group fields, select the allocated Resource Group.
5. Select Next.
6. In the Install Instruction section, select the Argus tab.
7. Select the resourceGroupID parameter and replace the default value with the system.deviceGroupId property value of the allocated resource group.
8. Select Verify Connection. When the connection is successful, your cluster is added.