Review updates

elastic · Jul 1, 2021 · 08e9149 · 08e9149
1 parent fefeb93
commit 08e9149
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 4 deletions.
diff --git a/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml b/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml
@@ -26,10 +26,12 @@ spec:
           env:
             - name: FLEET_ENROLL
               value: "1"
+              # Set to true in case of insecure or unverified HTTP
             - name: FLEET_INSECURE
-              value: "1"
+              value: false
+              # The ip:port pair of fleet server
             - name: FLEET_URL
-              value: "fleet_server_ip:port"
+              value: "https://fleet-server:8220"
             - name: KIBANA_HOST
               value: "http://kibana:5601"
             - name: KIBANA_FLEET_USERNAME
@@ -157,6 +159,10 @@ rules:
       - nodes/stats
     verbs:
       - get
+  - apiGroups: [ "batch" ]
+    resources:
+      - jobs
+    verbs: [ "get", "list", "watch" ]
   # required for apiserver
   - nonResourceURLs:
       - "/metrics"

diff --git a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml
@@ -26,10 +26,12 @@ spec:
           env:
             - name: FLEET_ENROLL
               value: "1"
+              # Set to true in case of insecure or unverified HTTP
             - name: FLEET_INSECURE
-              value: "1"
+              value: false
+              # The ip:port pair of fleet server
             - name: FLEET_URL
-              value: "fleet_server_ip:port"
+              value: "https://fleet-server:8220"
             - name: KIBANA_HOST
               value: "http://kibana:5601"
             - name: KIBANA_FLEET_USERNAME

diff --git a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml
@@ -35,6 +35,10 @@ rules:
       - nodes/stats
     verbs:
       - get
+  - apiGroups: [ "batch" ]
+    resources:
+      - jobs
+    verbs: [ "get", "list", "watch" ]
   # required for apiserver
   - nonResourceURLs:
       - "/metrics"