integrations-core icon indicating copy to clipboard operation
integrations-core copied to clipboard

VSphere integration dies when permission denied on some resources

Open dmartin-isp opened this issue 2 years ago • 0 comments

Note: If you have a feature request, you should contact support so the request can be properly tracked.

Output of the info page

Sorry, we found work-around before gathering this.

Additional environment details (Operating System, Cloud provider, etc):

Steps to reproduce the issue:

  1. Have a read-only user without read permission to some resources (don't know exactly which)
  2. try to run the vsphere integration using that user
  3. get no metrics, see errors in logs

Describe the results you received:

pyVmomi.VmomiSupport.vim.fault.NoPermission: (vim.fault.NoPermission) {
   dynamicType = <unset>,
   dynamicProperty = (vmodl.DynamicProperty) [],
   msg = 'Permission to perform this operation was denied.',
   faultCause = <unset>,
   faultMessage = (vmodl.LocalizableMessage) [],
   object = 'vim.Folder:group-d1',
   privilegeId = 'System.Read',
   missingPrivileges = (vim.fault.NoPermission.EntityPrivileges) [
      (vim.fault.NoPermission.EntityPrivileges) {
         dynamicType = <unset>,
         dynamicProperty = (vmodl.DynamicProperty) [],
         entity = 'vmodl.query.PropertyCollector:propertyCollector',
         privilegeIds = (str) [
            'System.Read'
         ]
      }
   ]
}
"}]

No vsphere metrics sent.

Describe the results you expected: Unreadable resources should be gracefully skipped. I should get metrics for resources I do have read access to.

Additional information you deem important (e.g. issue happens only occasionally): Got the admins to give us global read-only access, and that "solved" the problem. Authentication definitely working. Using a wrong password results in a completely different error message.

dmartin-isp avatar Apr 24 '24 16:04 dmartin-isp