From 0d398e5044aa706b2aaca34713324aabaffaafc3 Mon Sep 17 00:00:00 2001 From: awwithro Date: Tue, 28 Nov 2017 09:39:10 -0700 Subject: [PATCH] [stable/datadog] Adding full datadog role permissions (#2804) * Adding all the RBAC permissions DataDog needs * Add comments back * Bump Chart version * Bumping Chart version --- stable/datadog/Chart.yaml | 2 +- stable/datadog/templates/clusterrole.yaml | 20 +++++++++++++++++--- 2 files changed, 18 insertions(+), 4 deletions(-) diff --git a/stable/datadog/Chart.yaml b/stable/datadog/Chart.yaml index 795c1cf08a..8147c0782f 100755 --- a/stable/datadog/Chart.yaml +++ b/stable/datadog/Chart.yaml @@ -1,5 +1,5 @@ name: datadog -version: 0.9.0 +version: 0.9.1 description: DataDog Agent keywords: - monitoring diff --git a/stable/datadog/templates/clusterrole.yaml b/stable/datadog/templates/clusterrole.yaml index f508365bd2..8175405345 100644 --- a/stable/datadog/templates/clusterrole.yaml +++ b/stable/datadog/templates/clusterrole.yaml @@ -13,12 +13,26 @@ rules: - "/version" # Used to get apiserver version metadata - "/healthz" # Healthcheck verbs: ["get"] +- apiGroups: ["apps"] + resources: + - "deployments" + verbs: ["get", "list"] +- apiGroups: ["batch"] + resources: + - "jobs" + verbs: ["get", "list"] +- apiGroups: ["extensions"] + resources: + - "daemonsets" + - "replicasets" + verbs: ["get", "list"] - apiGroups: [""] resources: + - "namespaces" # + - "events" # Cluster events + kube_service cache invalidation + - "services" # kube_service tag - "nodes" - - "namespaces" # - - "events" # Cluster events + kube_service cache invalidation - - "services" # kube_service tag + - "pods" verbs: ["get", "list"] - apiGroups: [""] resources: