If the Application Real-Time Monitoring Service (ARMS) agent fails to install for an application in a Container Service for Kubernetes (ACK) cluster, the cause is that the ARMS Addon Token does not exist in the cluster that you want to manage.
To resolve this, verify that the token exists and then grant the required permissions.
Step 1: Check whether the ARMS Addon Token exists
Log on to the ACK console. In the left-side navigation pane, click Clusters, and then click the name of your cluster.
In the left-side navigation pane, choose Configurations > Secrets.
Select kube-system from the Namespace drop-down list and check whether addon.arms.token exists.
Step 2: Grant ACK permissions to access ARMS
If the token is missing, grant the cluster worker nodes access to ARMS by manually adding the required Resource Access Management (RAM) permission policies.
Log on to the ACK console. In the left-side navigation pane, click Clusters, and then click the name of your cluster.
On the Basic Information tab of the Cluster Information page, find the Cluster Resources section and click the link next to Worker RAM Role.
On the RAM page that appears, click Grant Permission on the Permissions tab.
In the Grant Permission panel, add the following policies and click Grant permissions:
Policy Description AliyunTracingAnalysisFullAccess Full access to Managed Service for OpenTelemetry AliyunARMSFullAccess Full access to ARMS