3.4. 필요한 RBAC 리소스 자동 생성

프로세스

• OpenTelemetry Operator의 Red Hat 빌드가 자동으로 생성할 수 있도록 opentelemetry-operator-controller-manage 서비스 계정에 다음 권한을 추가합니다.

  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    name: generate-processors-rbac
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterrolebindings
    - clusterroles
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  ---
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRoleBinding
  metadata:
    name: generate-processors-rbac
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: generate-processors-rbac
  subjects:
  - kind: ServiceAccount
    name: opentelemetry-operator-controller-manager
    namespace: openshift-opentelemetry-operator