image: repository: grafana/agent-operator pullPolicy: IfNotPresent tag: v0.39.2@sha256:841e8e1365758116d4058aa561d8d0f9deb3f6339d17548eadeeecc46889307f podOptions: automountServiceAccountToken: true service: main: enabled: false ports: main: enabled: false workload: main: podSpec: containers: main: args: - "--kubelet-service={{ .Values.kubeletService.namespace }}/{{ .Values.kubeletService.serviceName }}" probes: liveness: enabled: false readiness: enabled: false startup: enabled: false portal: open: enabled: false rbac: main: enabled: true primary: true clusterWide: true rules: - apiGroups: [monitoring.grafana.com] resources: - grafanaagents - metricsinstances - logsinstances - podlogs - integrations verbs: [get, list, watch] - apiGroups: [monitoring.grafana.com] resources: - grafanaagents/finalizers - metricsinstances/finalizers - logsinstances/finalizers - podlogs/finalizers - integrations/finalizers verbs: [get, list, watch, update] - apiGroups: [monitoring.coreos.com] resources: - podmonitors - probes - servicemonitors verbs: [get, list, watch] - apiGroups: [monitoring.coreos.com] resources: - podmonitors/finalizers - probes/finalizers - servicemonitors/finalizers verbs: [get, list, watch, update] - apiGroups: [""] resources: - namespaces - nodes verbs: [get, list, watch] - apiGroups: [""] resources: - secrets - services - configmaps - endpoints verbs: [get, list, watch, create, update, patch, delete] - apiGroups: ["apps"] resources: - statefulsets - daemonsets - deployments verbs: [get, list, watch, create, update, patch, delete] # -- The service account the pods will use to interact with the Kubernetes API serviceAccount: main: enabled: true primary: true # -- If both are set, Agent Operator will create and maintain a service for scraping kubelets # https://grafana.com/docs/agent/latest/operator/getting-started/#monitor-kubelets kubeletService: namespace: default serviceName: kubelet