diff --git a/charts/netdata/README.md b/charts/netdata/README.md index 8f8ef2b..4a447e5 100644 --- a/charts/netdata/README.md +++ b/charts/netdata/README.md @@ -67,19 +67,20 @@ Netdata is a comprehensive monitoring solution that requires specific access to ### Required Kubernetes RBAC Resources -| Resource | Verbs | Components & Descriptions | -|:-------------------|:-----------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| pods | get, list, watch | • **service discovery**: Used for discovering services.
• **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | -| services | get, list, watch | • **service discovery**: Used for discovering services. | -| configmaps | get, list, watch | • **service discovery**: Used for discovering services. | -| secrets | get, list, watch | • **service discovery**: Used for discovering services. | -| nodes | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| nodes/metrics | get, list, watch | • **go.d/k8s_kubelet**: Used when querying Kubelet HTTPS endpoint. | -| nodes/proxy | get, list, watch | • **netdata**: Used by cgroup-name.sh when querying Kubelet /pods endpoint. | -| deployments (apps) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| cronjobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| jobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| namespaces | get | • **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | +| Resource | Verbs | Components & Descriptions | +|:-----------------------|:-----------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| pods | get, list, watch | • **service discovery**: Used for discovering services.
• **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | +| services | get, list, watch | • **service discovery**: Used for discovering services. | +| configmaps | get, list, watch | • **service discovery**: Used for discovering services. | +| secrets | get, list, watch | • **service discovery**: Used for discovering services. | +| nodes | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| nodes/metrics | get, list, watch | • **go.d/k8s_kubelet**: Used when querying Kubelet HTTPS endpoint. | +| nodes/proxy | get, list, watch | • **netdata**: Used by cgroup-name.sh when querying Kubelet /pods endpoint. | +| persistentvolumeclaims | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring (PersistentVolumeClaim capacity). | +| deployments (apps) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| cronjobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| jobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| namespaces | get | • **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | diff --git a/charts/netdata/templates/clusterrole.yaml b/charts/netdata/templates/clusterrole.yaml index a0c03e5..1ce0846 100644 --- a/charts/netdata/templates/clusterrole.yaml +++ b/charts/netdata/templates/clusterrole.yaml @@ -18,6 +18,7 @@ rules: - "nodes" # used by go.d/k8s_state - "nodes/metrics" # used by go.d/k8s_kubelet when querying Kubelet HTTPS endpoint - "nodes/proxy" # used by netdata (cgroup-name.sh) when querying Kubelet /pods endpoint + - "persistentvolumeclaims" # used by go.d/k8s_state verbs: - "get" - "list" diff --git a/templates/netdata-README.md.gotmpl b/templates/netdata-README.md.gotmpl index ebaade6..c56d4dd 100644 --- a/templates/netdata-README.md.gotmpl +++ b/templates/netdata-README.md.gotmpl @@ -67,19 +67,20 @@ Netdata is a comprehensive monitoring solution that requires specific access to ### Required Kubernetes RBAC Resources -| Resource | Verbs | Components & Descriptions | -|:-------------------|:-----------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| pods | get, list, watch | • **service discovery**: Used for discovering services.
• **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | -| services | get, list, watch | • **service discovery**: Used for discovering services. | -| configmaps | get, list, watch | • **service discovery**: Used for discovering services. | -| secrets | get, list, watch | • **service discovery**: Used for discovering services. | -| nodes | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| nodes/metrics | get, list, watch | • **go.d/k8s_kubelet**: Used when querying Kubelet HTTPS endpoint. | -| nodes/proxy | get, list, watch | • **netdata**: Used by cgroup-name.sh when querying Kubelet /pods endpoint. | -| deployments (apps) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| cronjobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| jobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | -| namespaces | get | • **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | +| Resource | Verbs | Components & Descriptions | +|:-----------------------|:-----------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| pods | get, list, watch | • **service discovery**: Used for discovering services.
• **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. | +| services | get, list, watch | • **service discovery**: Used for discovering services. | +| configmaps | get, list, watch | • **service discovery**: Used for discovering services. | +| secrets | get, list, watch | • **service discovery**: Used for discovering services. | +| nodes | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| nodes/metrics | get, list, watch | • **go.d/k8s_kubelet**: Used when querying Kubelet HTTPS endpoint. | +| nodes/proxy | get, list, watch | • **netdata**: Used by cgroup-name.sh when querying Kubelet /pods endpoint. | +| persistentvolumeclaims | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring (PersistentVolumeClaim capacity). | +| deployments (apps) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| cronjobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| jobs (batch) | get, list, watch | • **go.d/k8s_state**: Kubernetes state monitoring. | +| namespaces | get | • **go.d/k8s_state**: Kubernetes state monitoring.
• **netdata**: Used by cgroup-name.sh and get-kubernetes-labels.sh scripts. |