install odigos in openshift

odigos-io · May 11, 2024 · 87da6fe · 87da6fe
1 parent 3377155
commit 87da6fe
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 17 deletions.
diff --git a/README.md b/README.md
@@ -26,6 +26,14 @@ helm upgrade --install odigos odigos/odigos --namespace odigos-system --create-n
 kubectl label namespace odigos-system odigos.io/system-object="true"
 ```
 
+### Managing SCCs in OpenShift for Odigos
+
+```console
+oc adm policy add-scc-to-group anyuid system:serviceaccounts:odigos-system
+oc adm policy add-scc-to-user privileged -z odiglet -n odigos-system
+oc adm policy add-scc-to-user privileged -z odigos-data-collection -n odigos-system
+```
+
 ### Upgrade Existing Odigos Installation
 
 ```console

diff --git a/charts/odigos/templates/autoscaler/clusterrole.yaml b/charts/odigos/templates/autoscaler/clusterrole.yaml
@@ -4,35 +4,29 @@ metadata:
   name: odigos-autoscaler
 rules:
   - apiGroups:
-      - odigos.io
+      - ""
     resources:
-      - instrumentedapplications
+      - configmaps
+      - services
     verbs:
-      - create
-      - delete
       - get
       - list
-      - patch
-      - update
       - watch
   - apiGroups:
-      - odigos.io
-    resources:
-      - instrumentedapplications/finalizers
-    verbs:
-      - update
-  - apiGroups:
-      - odigos.io
+      - apps
     resources:
-      - instrumentedapplications/status
+      - daemonsets
+      - deployments
     verbs:
       - get
-      - patch
-      - update
+      - list
+      - watch
   - apiGroups:
       - odigos.io
     resources:
+      - instrumentedapplications
       - collectorsgroups
+      - odigosconfigurations
       - destinations
       - processors
     verbs:
@@ -47,13 +41,15 @@ rules:
       - odigos.io
     resources:
       - collectorsgroups/finalizers
+      - instrumentedapplications/finalizers
       - destinations/finalizers
     verbs:
       - update
   - apiGroups:
       - odigos.io
     resources:
       - collectorsgroups/status
+      - instrumentedapplications/status
       - destinations/status
     verbs:
       - get
@@ -104,4 +100,4 @@ rules:
     verbs:
       - get
       - list
-      - watch
+      - watch
diff --git a/charts/odigos/templates/odiglet/clusterrole.yaml b/charts/odigos/templates/odiglet/clusterrole.yaml
@@ -32,6 +32,14 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - apps
+    resources:
+      - daemonsets/finalizers
+      - deployments/finalizers
+      - statefulsets/finalizers
+    verbs:
+      - update
   - apiGroups:
       - apps
     resources: