ps-agent RBAC Permissions
Explore permissions PerfectScale Agent requires to provide the service
In order to provide the insights, and take the automated actions, to keep your K8s environment optimized, our ps-agent requires the below permissions.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: perfectscale-exporter
rules:
- apiGroups:
- ""
resources:
- pods
- nodes
- nodes/proxy
- replicationcontrollers
- persistentvolumeclaims
- persistentvolumes
- services
- namespaces
- events
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- "apps"
resources:
- deployments
- replicasets
- daemonsets
- statefulsets
verbs:
- get
- list
- watch
- apiGroups:
- "storage.k8s.io"
resources:
- storageclasses
- csinodes
verbs:
- get
- list
- watch
- apiGroups:
- "batch"
resources:
- jobs
verbs:
- get
- list
- watch
- apiGroups:
- "autoscaling"
resources:
- horizontalpodautoscalers
verbs:
- get
- list
- watch
- apiGroups:
- "coordination.k8s.io"
resources:
- leases
verbs:
- create
- get
- list
- watch
- update
- apiGroups:
- "metrics.k8s.io"
resources:
- pods
verbs:
- get
- list
- nonResourceURLs:
- "/version"
verbs:
- "get"
Last updated