IAM permission to run

[rucciva]

hi, what is the permission required for an IAM user to be used by this project. currently i give IAM read only access and CES read only access but i still got the following error

recover error: failed to get domain id, No domain id found, please select one of the following solutions:1. Manually specify domain_id when initializing the credentials.2. Use the domain account to grant the current account permissions of the IAM service.3. Use AK/SK of the domain account.

IAM read only access

{
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "iam:*:get*",
                "iam:*:list*",
                "iam:*:check*"
            ],
            "Effect": "Allow"
        }
    ]
}

CES read only access

{
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "ces:*:get*",
                "ces:*:list*",
                "*:*:get*",
                "*:*:list*"
            ],
            "Effect": "Allow"
        }
    ]
}

[cxl123156]

CES，RMS，EPS and ELB read access is required

[rucciva]

Hi @cxl123156 , thanks for the reply.
i did grant the following permisison as you pointed out but i still got the following error

  [SYS.RDS-1694049463985-1694050063985] recover error: failed to get domain id, No domain id found, please select one of the following solutions:1. Manually specify domain_id when initializing the credentials.2. Use the domain account to grant the current account permissions of the IAM service.3. Use AK/SK of the domain account.

my clouds.yml setting is following:

global:
 prefix: "huaweicloud"
 port: ":8087"
 metric_path: "/metrics"
 scrape_batch_size: 300

auth:
 auth_url: "https://iam.ap-southeast-4.myhuaweicloud.com/v3"
 access_key: "<redacted>"
 secret_key: "<redacted>"
 user_name: ""
 password: ""
 domain_name: "<redacted>"
 region: "ap-southeast-4"
 project_id: "<redacted>"
 project_name: "ap-southeast-4"

[cxl123156]

@rucciva which version of cloudeye-exporter did you used?

[rucciva]

hi @cxl123156 , its v2.0.5 with a custom dockerfile here