From e1bf5d3ad3065755dbd13f58ca85ca06f4f7038f Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Sun, 6 Apr 2025 17:26:11 +0800
Subject: [PATCH] fix(fluentbit): RBAC

---
 kube/deploy/core/monitoring/fluentbit/app/rbac.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml b/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
index 77eb6dad..40cea952 100644
--- a/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
+++ b/kube/deploy/core/monitoring/fluentbit/app/rbac.yaml
@@ -5,7 +5,7 @@ metadata:
   name: "fluentbit"
 rules:
   - apiGroups: [""]
-    resources: ["pods", "namespaces"]
+    resources: ["pods", "namespaces", "nodes", "nodes/proxy"]
     verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -20,6 +20,9 @@ subjects:
   - kind: ServiceAccount
     name: *app
     namespace: *app
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:serviceaccounts
 ---
 apiVersion: v1
 kind: ServiceAccount