constellation/hack/logcollector/internal/templates/metricbeat/values-control-plane.yml

# Helm Values for the DaemonSet that is deployed on all control plane nodes in the cluster and
# collects Kubernetes and etcd metrics.
image: ghcr.io/edgelesssys/beats/metricbeat-oss
imageTag: 8.11.0@sha256:c2488378e794467f2a7214a56da0de017db1f2c28198721f12d74ad9cc263d08

kube_state_metrics:
  enabled: false

deployment:
    enabled: false

daemonset:
    enabled: true
    metricbeatConfig:
      metricbeat.yml: ""
    hostNetworking: true
    extraEnvs: []
    secretMounts: []
    nodeSelector:
      node-role.kubernetes.io/control-plane: ""
    tolerations:
      - key: node-role.kubernetes.io/control-plane
        operator: Exists
        effect: NoSchedule
    securityContext:
      privileged: true
      runAsUser: 0
    extraVolumeMounts:
      - name: runsystemd
        mountPath: /run/systemd
        readOnly: true
      - name: varrundbus
        mountPath: /var/run/dbus
        readOnly: true
      - name: etcdcerts
        mountPath: /etc/kubernetes/pki/etcd
        readOnly: true
    extraVolumes:
      - name: runsystemd
        hostPath:
          path: /run/systemd
          type: ""
      - name: varrundbus
        hostPath:
          path: /var/run/dbus
          type: ""
      - name: etcdcerts
        hostPath:
          path: /etc/kubernetes/pki/etcd
          type: ""
    resources:
      requests:
        cpu: "100m"
        memory: "100Mi"
      limits: null
      
clusterRoleRules:
  - apiGroups: [""]
    resources:
      - nodes
      - namespaces
      - events
      - pods
      - services
    verbs: ["get", "list", "watch"]
  - apiGroups: ["extensions"]
    resources:
      - replicasets
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources:
      - statefulsets
      - deployments
      - replicasets
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources:
      - nodes/stats
    verbs: ["get"]
  - apiGroups: ["batch"]
    resources:
      - jobs
    verbs: ["get", "list", "watch"]
  - apiGroups:
      - ""
    resources:
      - nodes/stats
    verbs:
      - get
  - nonResourceURLs:
      - "/metrics"
    verbs:
      - get