fix(fluentbit): RBAC

2026-03-21 18:39:44 +00:00 · 2025-04-06 17:26:11 +08:00
parent b998ea2582
commit e1bf5d3ad3
1 changed files with 4 additions and 1 deletions
--- a/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
+++ b/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
@@ -5,7 +5,7 @@ metadata:
  name: "fluentbit"
 rules:
  - apiGroups: [""]
-    resources: ["pods", "namespaces"]
+    resources: ["pods", "namespaces", "nodes", "nodes/proxy"]
    verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -20,6 +20,9 @@ subjects:
  - kind: ServiceAccount
    name: *app
    namespace: *app
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:serviceaccounts
 ---
 apiVersion: v1
 kind: ServiceAccount