Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[receiver/kubeletstats] Add RBAC docs #27655

Merged
merged 2 commits into from
Oct 18, 2023
Merged

[receiver/kubeletstats] Add RBAC docs #27655

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2eb4304
Add RBAC docs
TylerHelmuth Oct 12, 2023
98a7986
Update receiver/kubeletstatsreceiver/README.md
TylerHelmuth Oct 12, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions receiver/kubeletstatsreceiver/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,3 +228,24 @@ The following parameters can also be specified:

The full list of settings exposed for this receiver are documented [here](./config.go)
with detailed sample configurations [here](./testdata/config.yaml).

### Role-based access control

The Kubelet Stats Receiver needs `get` permissions on the `nodes/stats` resources. Additionally, when using `extra_metadata_labels` or any of the `{request|limit}_utilization` metrics the processor also needs `get` permissions for `nodes/proxy` resources.

```yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: otel-collector
rules:
- apiGroups: [""]
resources: ["nodes/stats"]
verbs: ["get"]

# Only needed if you are using extra_metadata_labels or
# are collecting the request/limit utilization metrics
- apiGroups: [""]
resources: ["nodes/proxy"]
verbs: ["get"]
```