diff --git a/charts/amazon-cloudwatch-observability/templates/operator-clusterrole.yaml b/charts/amazon-cloudwatch-observability/templates/operator-clusterrole.yaml index 6aeec293..27d48ab0 100644 --- a/charts/amazon-cloudwatch-observability/templates/operator-clusterrole.yaml +++ b/charts/amazon-cloudwatch-observability/templates/operator-clusterrole.yaml @@ -5,19 +5,31 @@ metadata: rules: - apiGroups: [ "" ] resources: [ "configmaps" ] - verbs: [ "create", "delete", "get", "list", "patch", "update", "watch" ] + verbs: [ "create","get","list", "watch" ] +- apiGroups: [ "" ] + resources: [ "configmaps" ] + resourceNames: ["cloudwatch-agent", "cloudwatch-agent-windows", "cwagent-clusterleader", "dcgm-exporter-config-map", "fluent-bit-config", "fluent-bit-windows-config", "neuron-monitor-config-map", "kube-root-ca.crt"] + verbs: [ "delete","patch","update" ] - apiGroups: [ "" ] resources: [ "events" ] - verbs: [ "create", "patch" ] + verbs: [ "create","patch" ] - apiGroups: [ "" ] resources: [ "namespaces" ] verbs: [ "get","list","patch","update","watch" ] - apiGroups: [ "" ] resources: [ "serviceaccounts" ] - verbs: [ "create","delete","get","list","patch","update","watch" ] + verbs: [ "create","get", "list", "watch" ] +- apiGroups: [ "" ] + resources: [ "serviceaccounts" ] + resourceNames: [ "amazon-cloudwatch-observability-controller-manager", "cloudwatch-agent", "dcgm-exporter-service-acct", "neuron-monitor-service-acct"] + verbs: ["delete","patch","update" ] - apiGroups: [ "" ] resources: [ "services" ] - verbs: [ "create","delete","get","list","patch","update","watch" ] + verbs: [ "create","get","list","watch" ] +- apiGroups: [ "" ] + resources: [ "services" ] + resourceNames: [ "amazon-cloudwatch-observability-webhook-service", "cloudwatch-agent", "cloudwatch-agent-headless", "cloudwatch-agent-monitoring", "cloudwatch-agent-windows", "cloudwatch-agent-windows-headless", "cloudwatch-agent-windows-monitoring", "dcgm-exporter-service", "neuron-monitor-service" ] + verbs: [ "delete","patch","update" ] - apiGroups: [ "apps" ] resources: [ "daemonsets" ] verbs: [ "create","delete","get","list","patch","update","watch" ] @@ -41,13 +53,4 @@ rules: verbs: [ "get","patch","update" ] - apiGroups: [ "cloudwatch.aws.amazon.com" ] resources: [ "instrumentations" ] - verbs: [ "get","list","patch","update","watch" ] -- apiGroups: [ "coordination.k8s.io" ] - resources: [ "leases" ] - verbs: [ "create","get","list","update" ] -- apiGroups: [ "networking.k8s.io" ] - resources: [ "ingresses" ] - verbs: [ "create","delete","get","list","patch","update","watch" ] -- apiGroups: [ "route.openshift.io" ] - resources: [ "routes", "routes/custom-host" ] - verbs: [ "create","delete","get","list","patch","update","watch" ] + verbs: [ "get","list","patch","update","watch" ] \ No newline at end of file