Add services resource rule to agent cluster role (#168)

aws-samples · May 10, 2024 · eaa395c · eaa395c
1 parent b102474
commit eaa395c
Show file tree

Hide file tree

Showing 7 changed files with 21 additions and 0 deletions.
diff --git a/k8s-deployment-manifest-templates/deployment-mode/daemonset/combination/combination.yaml b/k8s-deployment-manifest-templates/deployment-mode/daemonset/combination/combination.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/...nset/container-insights-monitoring/quickstart/cwagent-fluent-bit-quickstart-enhanced.yaml b/...nset/container-insights-monitoring/quickstart/cwagent-fluent-bit-quickstart-enhanced.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/...ode/daemonset/container-insights-monitoring/quickstart/cwagent-fluent-bit-quickstart.yaml b/...ode/daemonset/container-insights-monitoring/quickstart/cwagent-fluent-bit-quickstart.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/...emonset/container-insights-monitoring/quickstart/cwagent-fluentd-quickstart-enhanced.yaml b/...emonset/container-insights-monitoring/quickstart/cwagent-fluentd-quickstart-enhanced.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/...t-mode/daemonset/container-insights-monitoring/quickstart/cwagent-fluentd-quickstart.yaml b/...t-mode/daemonset/container-insights-monitoring/quickstart/cwagent-fluentd-quickstart.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/k8s-yaml-templates/cwagent-kubernetes-monitoring/cwagent-serviceaccount.yaml b/k8s-yaml-templates/cwagent-kubernetes-monitoring/cwagent-serviceaccount.yaml
@@ -17,6 +17,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]

diff --git a/k8s-yaml-templates/quickstart/cwagent-fluentd-quickstart.yaml b/k8s-yaml-templates/quickstart/cwagent-fluentd-quickstart.yaml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["apps"]
     resources: ["replicasets", "daemonsets", "deployments", "statefulsets"]
     verbs: ["list", "watch"]
+  - apiGroups: [ "" ]
+    resources: [ "services" ]
+    verbs: [ "list", "watch" ]
   - apiGroups: ["batch"]
     resources: ["jobs"]
     verbs: ["list", "watch"]