chore: rbac permissions for odiglet #2049
Conversation
| }, | ||
| &corev1.Namespace{}: { |
There was a problem hiding this comment.
note: this was not used and is leftover from the time we were calculating if workload is instrumented in odiglet
| - pods | ||
| - services |
There was a problem hiding this comment.
remove service which is not used by odiglet
| @@ -6,26 +6,25 @@ rules: | |||
| - apiGroups: | |||
| - "" | |||
| resources: | |||
| - configmaps | |||
| - namespaces | |||
There was a problem hiding this comment.
remove namespaces - not used by odiglet
| @@ -6,26 +6,25 @@ rules: | |||
| - apiGroups: | |||
| - "" | |||
| resources: | |||
| - configmaps | |||
There was a problem hiding this comment.
made configmap role instead of clusterrole
| - daemonsets/finalizers | ||
| - deployments/finalizers | ||
| - statefulsets/finalizers | ||
| verbs: | ||
| - update |
There was a problem hiding this comment.
finalizers are not modified by odiglet
| - collectorsgroups | ||
| - collectorsgroups/status |
There was a problem hiding this comment.
made collectorsgroup role instead of clusterrole. we should remove them and record the signals in instrumentationconfig (future PR)
| - apiGroups: | ||
| - odigos.io | ||
| resources: | ||
| - odigosconfigurations |
There was a problem hiding this comment.
leftover from the time the config was a special CRD (and not configmap)
remove unused permissions and make some of them role instead of clusterrole