feat: label kubernetes ephemeral serviceaccounts

- ensure all service accounts are labelled with role/cluster - add additional api endpoints to cluster roles
2025-12-07 12:41:37 +11:00
parent 3bada72838
commit c88b19a216
3 changed files with 26 additions and 0 deletions
@@ -17,6 +17,9 @@ rules:
      - "nfd.k8s-sigs.io"
      - "policy"
      - "metrics.k8s.io"
+      - "logstash.k8s.elastic.co"
+      - "elasticsearch.k8s.elastic.co"
+      - "kibana.k8s.elastic.co"
    resources:
      - "*"
    verbs:
@@ -17,6 +17,9 @@ rules:
      - "nfd.k8s-sigs.io"
      - "policy"
      - "metrics.k8s.io"
+      - "logstash.k8s.elastic.co"
+      - "elasticsearch.k8s.elastic.co"
+      - "kibana.k8s.elastic.co"
    resources:
      - "*"
    verbs: