Give Auditbeat k8s Clusterrole job permissions (#36703)

Update the Auditbeat Kubernetes cluster role to add read permissions on jobs/cronjobs. These permissions were added to other Cluster Role permissions previously, but was missed on auditbeat.
elastic · Oct 13, 2023 · ee455fc · ee455fc
1 parent df4d550
commit ee455fc
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/deploy/kubernetes/auditbeat-kubernetes.yaml b/deploy/kubernetes/auditbeat-kubernetes.yaml
@@ -23,6 +23,10 @@ rules:
   resources:
     - replicasets
   verbs: ["get", "list", "watch"]
+- apiGroups: ["batch"]
+  resources:
+    - jobs
+  verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role

diff --git a/deploy/kubernetes/auditbeat/auditbeat-role.yaml b/deploy/kubernetes/auditbeat/auditbeat-role.yaml
@@ -15,6 +15,10 @@ rules:
   resources:
     - replicasets
   verbs: ["get", "list", "watch"]
+- apiGroups: ["batch"]
+  resources:
+    - jobs
+  verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role