google-compute-engine - 未授权具有完全访问范围的 Stackdriver Monitoring

Question

部署具有完整 API 访问权限的全新 Google 计算引擎实例并安装 Stackdriver 代理后，监控不会显示来自代理的任何指标。

根据Install Agent手动，无需进一步设置(例如手动配置 API key )。

代理服务状态还显示以下错误:

$ systemctl status stackdriver-agent
Jul 13 10:14:00 host stackdriver-agent[21203]: [  OK  ]
Jul 13 10:14:00 host systemd[1]: Started LSB: start and stop Stackdriver Agent.
Jul 13 10:14:00 host collectd[21226]: Initialization complete, entering read-loop.
Jul 13 10:14:00 host collectd[21226]: match_throttle_metadata_keys: 1 history entries, 1 distinct keys, 46 bytes server memory.
Jul 13 10:14:00 host collectd[21226]: tcpconns plugin: Reading from netlink succeeded. Will use the netlink method from now on.
Jul 13 10:14:00 host collectd[21226]: write_gcm: Asking metadata server for auth token
Jul 13 10:14:01 host collectd[21226]: write_gcm: Unsuccessful HTTP request 403: {
                                               "error": {
                                                 "code": 403,...
Jul 13 10:14:01 host collectd[21226]: write_gcm: Error talking to the endpoint.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segment failed.
Jul 13 10:14:01 host collectd[21226]: write_gcm: wg_transmit_unique_segments failed. Flushing.

Google Cloud Console 显示实例具有:

Cloud API access scopes
This instance has full API access to all Google Cloud services.

并在实例中运行以下命令显示:

$ curl --silent -f -H "Metadata-Flavor: Google" http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/scopes
https://www.googleapis.com/auth/cloud-platform

对出了什么问题有什么想法吗？

Answer 1

我明白了:

你必须enable API Manager 中的 Google Monitoring API，默认情况下未启用。无需指定 API key ，将采用默认的应用程序凭据。

有趣的是，自今年年初以来，我有两个项目也使用 Stackdriver Monitoring，并且这些项目不需要启用 Google Monitoring API。