クラスタエージェントとインフラストラクチャの可視性に必要な権限

このページには、クラスタエージェント、Splunk AppDynamics オペレータ、およびインフラストラクチャの可視性のポッドがクラスタに展開されたときに作成される権限（RBAC 承認）が含まれています。

注: これらの権限を追加する必要はありません。これらはインストール中に自動的に作成されます。

Cluster Agent

The get, list, and watch permissions are created when you deploy Cluster Agent for the following resources:

  • pods

  • pods/log

  • endpoints

  • persistentvolumeclaims

  • resourcequotas

  • nodes

  • events

  • namespaces

  • services

  • configmaps

  • secrets

  • replicationcontrollers

  • daemonsets

  • statefulsets

  • deployment

  • replicasets

  • jobs

  • nodes

  • deploymentconfigs

Cluster Agent Auto-Instrumentation

The following permissions are created when you deploy Cluster Agent with auto-instrumentation:

Resources Permissions Required
pods
  • create
  • update
  • delete
pods/exec
secrets
configmaps

daemonsets

 update
statefulsets
deployments
replicasets
deploymentconfigs
namespaces
  • get
  • update
  • list
serviceaccounts

  • get

  • create
  • delete

Splunk AppDynamics Operator

The following permissions are created when you deploy Splunk AppDynamics Operator:

Resources Permissions Required
pods

  • get

  • watch

  • list

  • delete
pods/log
endpoints
persistentvolumeclaims
resourcequotas
nodes
events
namespaces
services
  • get
  • list
  • watch
  • create
  • update
  • delete
  • patch
configmaps
secrets
deployments
replicasets
daemonsets
statefulsets
jobs
  • get
  • list
  • watch
Cluster-Agent
  • get
  • list
  • watch
  • create
  • update
  • delete
  • patch
Clusteragents/finalizers update
Clusteragents/status
  • get
  • update
  • patch
Infravizs
  • get
  • list
  • watch
  • create
  • update
  • delete
  • patch
Infraviz/status
  • get
  • update
  • patch

Infrastructure Visibility

The following permissions are created when you deploy Infrastructure Visibility:

Resources View/Edit Permissions Required
Infravizs View
  • get
  • list
  • watch

Infravizs/status

 View get
Infravizs Edit
  • get
  • list
  • watch
  • create
  • update
  • delete
  • patch

Infraviz/status

 Edit get

Target Allocator

The following permissions are created when you deploy Cluster Agent Target Allocator:

Resources Permissions Required
namespaces
  • get
  • list
  • watch
pods
nodes
statefulsets

  • update

  • get

  • list

  • create
  • delete