Merge pull request #75067 from max-cx/TRACING-3899

OBSDOCS-928: Document permissions to generate automatically the permissions for the processors

Author: skopacz1

modules/otel-collector-components.adoc

@@ -1,6 +1,6 @@
 // Module included in the following assemblies:
 //
-// * observability/otel/otel-configuration-of-collector.adoc
+// * observability/otel/otel-configuration-of-otel-collector.adoc
 
 :_mod-docs-content-type: REFERENCE
 [id="otel-collector-components_{context}"]

modules/otel-collector-config-options.adoc

@@ -1,6 +1,6 @@
 // Module included in the following assemblies:
 //
-// * observability/otel/otel-configuration-of-collector.adoc
+// * observability/otel/otel-configuration-of-otel-collector.adoc
 
 :_mod-docs-content-type: REFERENCE
 [id="otel-collector-config-options_{context}"]

modules/otel-config-target-allocator.adoc

@@ -1,6 +1,6 @@
 // Module included in the following assemblies:
 //
-// * observability/otel/otel-configuration-of-collector.adoc
+// * observability/otel/otel-configuration-of-otel-collector.adoc
 
 :_mod-docs-content-type: REFERENCE
 [id="otel-config-target-allocator_{context}"]

modules/otel-creating-required-RBAC-resources-automatically.adoc

@@ -0,0 +1,48 @@
+// Module included in the following assemblies:
+//
+// * observability/otel/otel-configuration-of-otel-collector.adoc
+
+:_mod-docs-content-type: PROCEDURE
+[id="otel-creating-required-RBAC-resources-automatically_{context}"]
+= Creating the required RBAC resources automatically
+
+Some Collector components require configuring the RBAC resources.
+
+.Procedure
+
+* Add the following permissions to the `opentelemetry-operator-controller-manage` service account so that the {OTELOperator} can create them automatically:
++
+[source,yaml]
+----
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: generate-processors-rbac
+rules:
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterrolebindings
+  - clusterroles
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: generate-processors-rbac
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: generate-processors-rbac
+subjects:
+- kind: ServiceAccount
+  name: opentelemetry-operator-controller-manager
+  namespace: openshift-opentelemetry-operator
+----

observability/otel/otel-configuration-of-otel-collector.adoc

@@ -10,4 +10,5 @@ The {OTELName} Operator uses a custom resource definition (CRD) file that define
 
 include::modules/otel-collector-config-options.adoc[leveloffset=+1]
 include::modules/otel-collector-components.adoc[leveloffset=+1]
+include::modules/otel-creating-required-RBAC-resources-automatically.adoc[leveloffset=+1]
 include::modules/otel-config-target-allocator.adoc[leveloffset=+1]