Feature: Support Additional RBAC Rules in Fluent Operator ClusterRole #1772
Description
Is your feature request related to a problem? Please describe.
Problem
As fluent-bit & fluentd are managed by the fluent-operator, fluent-bit & fluentd can only be granted permissions the operator also has.
We want to be able to add additional RBAC rules to fluent-operator ClusterRole in order to have this flexibility in the dependent services.
Describe the solution you'd like
Add a way to extend the operator's ClusterRole permissions:
values.yaml: example
extraRbacRules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list"]
fluent-operator-clusterRole.yaml:
rules:
...
{{- if .Values.extraRbacRules }}
{{- toYaml .Values.extraRbacRules | nindent 2 }}
{{- end }}
If this change is too complex, I would appreciate if you could just add pod 'list' permissions:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
Additional context
No response