Commit 24717e93 authored by David McKay's avatar David McKay Committed by David McKay

fix: add nodes/proxy permission for kubelet pod request

parent 8611f63a
apiVersion: v1 apiVersion: v1
name: telegraf-ds name: telegraf-ds
version: 1.0.5 version: 1.0.6
appVersion: 1.14 appVersion: 1.14
deprecated: false deprecated: false
description: Telegraf is an agent written in Go for collecting, processing, aggregating, and writing metrics. description: Telegraf is an agent written in Go for collecting, processing, aggregating, and writing metrics.
......
...@@ -387,3 +387,4 @@ Create the name of the service account to use ...@@ -387,3 +387,4 @@ Create the name of the service account to use
{{ default "default" .Values.serviceAccount.name }} {{ default "default" .Values.serviceAccount.name }}
{{- end -}} {{- end -}}
{{- end -}} {{- end -}}
...@@ -11,8 +11,8 @@ rules: ...@@ -11,8 +11,8 @@ rules:
resources: ["pods"] resources: ["pods"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["nodes/stats"] resources: ["nodes/proxy"]
verbs: ["get", "watch", "list"] verbs: ["get", "list", "watch"]
--- ---
# Define global role with the default system:aggregate-to-view cluster role and the two rules we just created # Define global role with the default system:aggregate-to-view cluster role and the two rules we just created
kind: ClusterRole kind: ClusterRole
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment