.

Signed-off-by: ben-dov <ben.d@claroty.com>

Author: ben-dov

charts/fluent-operator/templates/fluent-operator-clusterRole.yaml

@@ -145,4 +145,7 @@ rules:
       - get
       - watch
       - patch
+  {{- if .Values.extraRbacRules }}
+    {{- toYaml .Values.extraRbacRules | nindent 2 }}
+  {{- end }}
 {{- end }}

charts/fluent-operator/values.yaml

@@ -34,6 +34,9 @@ operator:
       name: fluent-operator
     clusterRoleBinding:
       name: fluent-operator
+    # Adds additional permissions to Fluent Operator, since operator cannot give permissions it does not have.
+    # Use case includes adding permission to a custom fluent-bit deployment to access kubelet.
+    AdditionalRbacRules: {}
   # Container security context for Fluent Operator container. Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
   securityContext: {}
   # Fluent Operator resources. Usually user needn't to adjust these.