Imporve monitoring 6

infrastructure/helm/signoz-values-dev.yaml

@@ -779,33 +779,63 @@ otelCollector:
           processors: [memory_limiter, batch, resourcedetection, k8sattributes]
           exporters: [clickhouselogsexporter]
 
+  # ClusterRole configuration for Kubernetes monitoring
+  # CRITICAL: Required for k8s_cluster receiver to access Kubernetes API
+  # Without these permissions, k8s metrics will not appear in SigNoz UI
+  clusterRole:
+    create: true
+    name: "signoz-otel-collector-bakery-ia"
+    annotations: {}
+    # Complete RBAC rules required by k8sclusterreceiver
+    # Based on OpenTelemetry and SigNoz official documentation
+    rules:
+      # Core API group - fundamental Kubernetes resources
+      - apiGroups: [""]
+        resources:
+          - "events"
+          - "namespaces"
+          - "nodes"
+          - "nodes/proxy"
+          - "nodes/metrics"
+          - "nodes/spec"
+          - "pods"
+          - "pods/status"
+          - "replicationcontrollers"
+          - "replicationcontrollers/status"
+          - "resourcequotas"
+          - "services"
+          - "endpoints"
+        verbs: ["get", "list", "watch"]
+      # Apps API group - modern workload controllers
+      - apiGroups: ["apps"]
+        resources: ["deployments", "daemonsets", "statefulsets", "replicasets"]
+        verbs: ["get", "list", "watch"]
+      # Batch API group - job management
+      - apiGroups: ["batch"]
+        resources: ["jobs", "cronjobs"]
+        verbs: ["get", "list", "watch"]
+      # Autoscaling API group - HPA metrics (CRITICAL)
+      - apiGroups: ["autoscaling"]
+        resources: ["horizontalpodautoscalers"]
+        verbs: ["get", "list", "watch"]
+      # Extensions API group - legacy support
+      - apiGroups: ["extensions"]
+        resources: ["deployments", "daemonsets", "replicasets"]
+        verbs: ["get", "list", "watch"]
+      # Metrics API group - resource metrics
+      - apiGroups: ["metrics.k8s.io"]
+        resources: ["nodes", "pods"]
+        verbs: ["get", "list", "watch"]
+    clusterRoleBinding:
+      annotations: {}
+      name: "signoz-otel-collector-bakery-ia"
+
 # Additional Configuration
 serviceAccount:
   create: true
   annotations: {}
   name: "signoz-otel-collector"
 
-# RBAC Configuration for Kubernetes monitoring
-# Required for k8s_cluster and kubeletstats receivers to access Kubernetes API
-rbac:
-  create: true
-  rules:
-    - apiGroups: [""]
-      resources: ["nodes", "nodes/proxy", "nodes/metrics", "pods", "services", "endpoints", "namespaces"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["apps"]
-      resources: ["deployments", "daemonsets", "statefulsets", "replicasets"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["batch"]
-      resources: ["jobs", "cronjobs"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["extensions"]
-      resources: ["deployments", "daemonsets", "replicasets"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["metrics.k8s.io"]
-      resources: ["nodes", "pods"]
-      verbs: ["get", "list", "watch"]
-
 # Security Context
 securityContext:
   runAsNonRoot: true

infrastructure/helm/signoz-values-prod.yaml

@@ -893,6 +893,57 @@ otelCollector:
     targetCPUUtilizationPercentage: 70
     targetMemoryUtilizationPercentage: 80
 
+  # ClusterRole configuration for Kubernetes monitoring
+  # CRITICAL: Required for k8s_cluster receiver to access Kubernetes API
+  # Without these permissions, k8s metrics will not appear in SigNoz UI
+  clusterRole:
+    create: true
+    name: "signoz-otel-collector-bakery-ia"
+    annotations: {}
+    # Complete RBAC rules required by k8sclusterreceiver
+    # Based on OpenTelemetry and SigNoz official documentation
+    rules:
+      # Core API group - fundamental Kubernetes resources
+      - apiGroups: [""]
+        resources:
+          - "events"
+          - "namespaces"
+          - "nodes"
+          - "nodes/proxy"
+          - "nodes/metrics"
+          - "nodes/spec"
+          - "pods"
+          - "pods/status"
+          - "replicationcontrollers"
+          - "replicationcontrollers/status"
+          - "resourcequotas"
+          - "services"
+          - "endpoints"
+        verbs: ["get", "list", "watch"]
+      # Apps API group - modern workload controllers
+      - apiGroups: ["apps"]
+        resources: ["deployments", "daemonsets", "statefulsets", "replicasets"]
+        verbs: ["get", "list", "watch"]
+      # Batch API group - job management
+      - apiGroups: ["batch"]
+        resources: ["jobs", "cronjobs"]
+        verbs: ["get", "list", "watch"]
+      # Autoscaling API group - HPA metrics (CRITICAL)
+      - apiGroups: ["autoscaling"]
+        resources: ["horizontalpodautoscalers"]
+        verbs: ["get", "list", "watch"]
+      # Extensions API group - legacy support
+      - apiGroups: ["extensions"]
+        resources: ["deployments", "daemonsets", "replicasets"]
+        verbs: ["get", "list", "watch"]
+      # Metrics API group - resource metrics
+      - apiGroups: ["metrics.k8s.io"]
+        resources: ["nodes", "pods"]
+        verbs: ["get", "list", "watch"]
+    clusterRoleBinding:
+      annotations: {}
+      name: "signoz-otel-collector-bakery-ia"
+
 # Schema Migrator - Manages ClickHouse schema migrations
 schemaMigrator:
   enabled: true
@@ -911,27 +962,6 @@ serviceAccount:
   annotations: {}
   name: "signoz"
 
-# RBAC Configuration for Kubernetes monitoring
-# Required for k8s_cluster receiver to access Kubernetes API
-rbac:
-  create: true
-  rules:
-    - apiGroups: [""]
-      resources: ["nodes", "nodes/proxy", "nodes/metrics", "pods", "services", "endpoints", "namespaces"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["apps"]
-      resources: ["deployments", "daemonsets", "statefulsets", "replicasets"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["batch"]
-      resources: ["jobs", "cronjobs"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["extensions"]
-      resources: ["deployments", "daemonsets", "replicasets"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["metrics.k8s.io"]
-      resources: ["nodes", "pods"]
-      verbs: ["get", "list", "watch"]
-
 # Security Context
 securityContext:
   runAsNonRoot: true