Use new RBAC settings in Vector Helm values

charts/studio/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: studio
 description: A Helm chart for Kubernetes
 type: application
-version: 0.18.109
+version: 0.18.110
 appVersion: "v2.210.0"
 maintainers:
   - name: iterative
@@ -23,11 +23,11 @@ dependencies:
     repository: "https://charts.bitnami.com/bitnami"
   - name: vector
     condition: vector-agent.enabled
-    version: "0.45.0"
+    version: "0.46.0"
     repository: "https://helm.vector.dev"
     alias: vector-agent
   - name: vector
     condition: vector-aggregator.enabled
-    version: "0.45.0"
+    version: "0.46.0"
     repository: "https://helm.vector.dev"
     alias: vector-aggregator

charts/studio/values.yaml

@@ -1040,6 +1040,17 @@ vector-agent:
     create: true
     name: studio-vector-agent
 
+  # -- Vector Agent ClusterRole configuration
+  rbac:
+    extraRules:
+      - apiGroups:
+          - ""
+        resources:
+          - nodes/metrics
+          - nodes/stats
+        verbs:
+          - get
+
   # -- Vector Agent configuration
   customConfig:
     data_dir: /data/vector
@@ -1113,38 +1124,6 @@ vector-agent:
           fieldPath: status.hostIP
 
   extraObjects:
-    - apiVersion: rbac.authorization.k8s.io/v1
-      kind: ClusterRole
-      metadata:
-        name: studio-vector-agent-extended
-        annotations:
-          helm.sh/hook: pre-install, pre-upgrade
-          helm.sh/hook-delete-policy: hook-failed, before-hook-creation
-
-      rules:
-        - apiGroups:
-            - ""
-          resources:
-            - nodes/metrics
-            - nodes/stats
-          verbs:
-            - get
-
-    - apiVersion: rbac.authorization.k8s.io/v1
-      kind: ClusterRoleBinding
-      metadata:
-        name: studio-vector-agent-extended
-        annotations:
-          helm.sh/hook: pre-install, pre-upgrade
-          helm.sh/hook-delete-policy: hook-failed, before-hook-creation
-      subjects:
-        - kind: ServiceAccount
-          name: studio-vector-agent
-          namespace: default  # FIXME: should be configurable
-      roleRef:
-        kind: ClusterRole
-        name: studio-vector-agent-extended
-
     - apiVersion: v1
       kind: Secret
       metadata:
@@ -1188,6 +1167,17 @@ vector-aggregator:
     create: true
     name: studio-vector-aggregator
 
+  # -- Vector Aggregator ClusterRole configuration
+  rbac:
+    extraRules:
+      - apiGroups:
+          - ""
+        resources:
+          - events
+        verbs:
+          - get
+          - list
+
   # -- Vector Aggregator resources
   resources:
     limits:
@@ -1313,38 +1303,6 @@ vector-aggregator:
           key: token
 
   extraObjects:
-    - apiVersion: rbac.authorization.k8s.io/v1
-      kind: ClusterRole
-      metadata:
-        name: studio-vector-aggregator-extended
-        annotations:
-          helm.sh/hook: pre-install, pre-upgrade
-          helm.sh/hook-delete-policy: hook-failed, before-hook-creation
-
-      rules:
-        - apiGroups:
-            - ""
-          resources:
-            - events
-          verbs:
-            - get
-            - list
-
-    - apiVersion: rbac.authorization.k8s.io/v1
-      kind: ClusterRoleBinding
-      metadata:
-        name: studio-vector-aggregator-extended
-        annotations:
-          helm.sh/hook: pre-install, pre-upgrade
-          helm.sh/hook-delete-policy: hook-failed, before-hook-creation
-      subjects:
-        - kind: ServiceAccount
-          name: studio-vector-aggregator
-          namespace: default  # FIXME: should be configurable
-      roleRef:
-        kind: ClusterRole
-        name: studio-vector-aggregator-extended
-
     - apiVersion: v1
       kind: Secret
       metadata: