grant cloudwatch agent permission to call endpointslices API (#172)

aws-observability · Feb 12, 2025 · fb4fa05 · fb4fa05
1 parent 497e498
commit fb4fa05
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/charts/amazon-cloudwatch-observability/templates/cloudwatch-agent-clusterrole.yaml b/charts/amazon-cloudwatch-observability/templates/cloudwatch-agent-clusterrole.yaml
@@ -9,6 +9,9 @@ rules:
 - apiGroups: [ "" ]
   resources: [ "pods", "pods/logs", "nodes", "nodes/proxy", "namespaces", "endpoints" ]
   verbs: [ "list", "watch", "get" ]
+- apiGroups: ["discovery.k8s.io"]
+  resources: ["endpointslices"]
+  verbs: ["list", "watch", "get"]
 - apiGroups: [ "" ]
   resources: [ "services" ]
   verbs: [ "list", "watch" ]