8.3.2/deployer/schema.yaml [43:132]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    x-google-marketplace:
      type: SERVICE_ACCOUNT
      serviceAccount:
        description: >
          Agent Service Account: elastic-agent
        roles:
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L1
        - type: ClusterRole
          rulesType: CUSTOM
          rules:
          - apiGroups: [""]
            resources:
              - nodes
              - namespaces
              - events
              - pods
              - services
              - configmaps
              - serviceaccounts
              - persistentvolumes
              - persistentvolumeclaims
            verbs: ["get", "list", "watch"]
          # Enable this rule only if planing to use kubernetes_secrets provider
          #- apiGroups: [""]
          #  resources:
          #  - secrets
          #  verbs: ["get"]
          - apiGroups: ["extensions"]
            resources:
              - replicasets
            verbs: ["get", "list", "watch"]
          - apiGroups: ["apps"]
            resources:
              - statefulsets
              - deployments
              - replicasets
              - daemonsets
            verbs: ["get", "list", "watch"]
          - apiGroups:
              - ""
            resources:
              - nodes/stats
            verbs:
              - get
          - apiGroups: [ "batch" ]
            resources:
              - jobs
              - cronjobs
            verbs: [ "get", "list", "watch" ]
          # required for apiserver
          # nonResourceURLs is not supported by this schema: https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/b309eb922897ec4b11356dd975941e20b51ae16c/marketplace/deployer_util/config_helper.py#L981
          # - nonResourceURLs:
          #     - "/metrics"
          #   verbs:
          #     - get
          # - apiGroups: ["rbac.authorization.k8s.io"]
          #   resources:
          #     - clusterrolebindings
          #     - clusterroles
          #     - rolebindings
          #     - roles
          #   verbs: ["get", "list", "watch"]
          - apiGroups: ["policy"]
            resources:
              - podsecuritypolicies
            verbs: ["get", "list", "watch"]
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L64
        - type: Role
          rulesType: CUSTOM
          rules:
            - apiGroups:
                - coordination.k8s.io
              resources:
                - leases
              verbs: ["get", "create", "update"]
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L79
        - type: Role
          rulesType: CUSTOM
          rules:
            - apiGroups: [""]
              resources:
                - configmaps
              resourceNames:
                - kubeadm-config
              verbs: ["get"]

  name:
    type: string
    title: Agent Instance Name
    description: Agent Instance Name
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



8.5.0/deployer/schema.yaml [43:132]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    x-google-marketplace:
      type: SERVICE_ACCOUNT
      serviceAccount:
        description: >
          Agent Service Account: elastic-agent
        roles:
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L1
        - type: ClusterRole
          rulesType: CUSTOM
          rules:
          - apiGroups: [""]
            resources:
              - nodes
              - namespaces
              - events
              - pods
              - services
              - configmaps
              - serviceaccounts
              - persistentvolumes
              - persistentvolumeclaims
            verbs: ["get", "list", "watch"]
          # Enable this rule only if planing to use kubernetes_secrets provider
          #- apiGroups: [""]
          #  resources:
          #  - secrets
          #  verbs: ["get"]
          - apiGroups: ["extensions"]
            resources:
              - replicasets
            verbs: ["get", "list", "watch"]
          - apiGroups: ["apps"]
            resources:
              - statefulsets
              - deployments
              - replicasets
              - daemonsets
            verbs: ["get", "list", "watch"]
          - apiGroups:
              - ""
            resources:
              - nodes/stats
            verbs:
              - get
          - apiGroups: [ "batch" ]
            resources:
              - jobs
              - cronjobs
            verbs: [ "get", "list", "watch" ]
          # required for apiserver
          # nonResourceURLs is not supported by this schema: https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/b309eb922897ec4b11356dd975941e20b51ae16c/marketplace/deployer_util/config_helper.py#L981
          # - nonResourceURLs:
          #     - "/metrics"
          #   verbs:
          #     - get
          # - apiGroups: ["rbac.authorization.k8s.io"]
          #   resources:
          #     - clusterrolebindings
          #     - clusterroles
          #     - rolebindings
          #     - roles
          #   verbs: ["get", "list", "watch"]
          - apiGroups: ["policy"]
            resources:
              - podsecuritypolicies
            verbs: ["get", "list", "watch"]
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L64
        - type: Role
          rulesType: CUSTOM
          rules:
            - apiGroups:
                - coordination.k8s.io
              resources:
                - leases
              verbs: ["get", "create", "update"]
        # https://github.com/elastic/elastic-agent/blob/f26b0eb53fa5b08c23a3145156cd4a245ad04f32/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml#L79
        - type: Role
          rulesType: CUSTOM
          rules:
            - apiGroups: [""]
              resources:
                - configmaps
              resourceNames:
                - kubeadm-config
              verbs: ["get"]

  name:
    type: string
    title: Agent Instance Name
    description: Agent Instance Name
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



