- add watch verb to permissions

- log message for uploading pod records

Signed-off-by: Alexei Ledenev <alexei.led@gmail.com>

deploy/rbac.yaml

@@ -27,7 +27,7 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["pods", "nodes"]
-    verbs: ["get", "list"]
+    verbs: ["get", "list" , "watch"]
 
 ---
 

internal/controller/controller.go

@@ -74,6 +74,7 @@ func (s *scanner) Run(ctx context.Context, log *logrus.Entry, nodeInformer Nodes
 			beginTime := endTime.Add(-60 * time.Minute)
 			record := usage.NewPodInfo(pod, beginTime, endTime, node)
 			// upload the record to EKS Lens
+			log.WithField("pod", record.Name).Debug("uploading one pod record to EKS Lens")
 			err := s.uploader.UploadOne(ctx, record)
 			if err != nil {
 				log.WithError(err).Error("uploading pod")
@@ -116,7 +117,8 @@ func (s *scanner) Run(ctx context.Context, log *logrus.Entry, nodeInformer Nodes
 				records = append(records, record)
 			}
 			// upload the records to EKS Lens
-			err := s.uploader.Upload(ctx, records)
+			log.WithField("count", len(records)).Debug("uploading pod records to EKS Lens")
+			err = s.uploader.Upload(ctx, records)
 			if err != nil {
 				log.WithError(err).Error("uploading pods to EKS Lens")
 			}

test/check_role.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: awscli-pod
+  namespace: eks-lens
+spec:
+  serviceAccountName: eks-lens-agent
+  restartPolicy: Never
+  containers:
+    - name: awscli
+      image: amazon/aws-cli
+      command:
+        - "/bin/sh"
+      args:
+        - "-c"
+        - "aws sts get-caller-identity"