Modifying Google Cluster Engine GKE API permissions

Question

My GKE cluster is running without Cloud Monitoring API access permission. I want to know whether or not I can enable it or will I have to start a new cluster all together? Is there any way by which I can change such permissions without having to recreate the entire cluster?

Answer 1

Try and create a new Node Pool with the permissions you want instead of creating the entire cluster.(You can delete the old node pool later):

gcloud container node-pools create new-np --cluster $CLUSTER --scopes monitoring

There's a little drawback to this approach though. If you are using the same service account in different locations. Like if account1 needs to access Cloud Monitoring from this cluster but this account is also being used by an unrelated GCE VM. Then you might want to work with caution as you GCE VM will also have access to Cloud Monitoring data.