gke/WARN/2023_001

Container File System has the required scopes for Image Streaming

Product: Google Kubernetes Engine
Rule class: WARN - Something that is possibly wrong

Description

Verify GKE nodes have the required scopes to use Image Streaming.

Remediation

You can use the following Cloud Logging filter to find matching log lines:

resource.type="k8s_node"
log_id("gcfsd")
jsonPayload.MESSAGE:"Request had insufficient authentication scopes"

To resolve this issue, add the devstorage.read_only scope to the cluster or node pool

Further information

See https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming#permissiondenied