bug: Helm: Insufficient ClusterRole rights

[nkaijala-elisa]

Describe the issue

After installing fluentd CRDs and fluentd in fluentd-only mode, the operator pod throws the following error:

2023-10-05T09:07:18Z    ERROR   Reconciler error        {"controller": "fluentd", "controllerGroup": "fluentd.fluent.io", "controllerKind": "Fluentd", "Fluentd": {"name":"fluentd","namespace":"<ns_name>"}, "namespace": "<ns_name>", "name": "fluentd", "reconcileID": "8dd87298-5330-4e30-a568-133cc3702d0e", "error": "secrets \"fluentd-config\" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>"}

To Reproduce

Install fluentd CRDs and fluentd in fluentd-only mode on an Openshift cluster.

Expected behavior

a Functioning operator with correct RBAC settings.

Your Environment

- Fluent Operator version: v1.15.3
- Container Runtime: CRI-O, on OpenShift 4.11
- Operating system: RHEL 8.6
- Kernel version: 4.18.0

How did you install fluent operator?

• Helm install
• Installed Fluentd CRDs
• Installed Fluentd in fluentd-only -mode
• Set up Security Context Constraints (OpenShift requirement)

Additional context

To fix:

Add - clusterfluentbitconfigs/finalizers under

  - apiGroups:
      - fluentbit.fluent.io
    resources:

in charts/fluent-operator/templates/fluent-operator-clusterRole.yaml