Grant permissions for custom namespace and secret access
Grant RBAC permissions to allow the Network Observability Operator to access secrets across custom or non-default namespaces.
For security, the Network Observability Operator does not have cluster-wide permissions to read secrets. You must explicitly grant the required permissions when any of the following conditions apply:
-
You configured
spec.namespacein theFlowCollectorresource to a namespace other thannetobserv. -
You configured the
FlowCollectorresource withspec.deploymentModel: Kafkaand TLS or mTLS enabled. -
You use the Loki Operator with
LokiStackinstalled in a namespace other thannetobserv.
Complete only the procedures that apply to your configuration. If you do not meet any of these conditions, no additional permissions are required.