k8sattributesprocessor RBAC documentation is not correct about replicasets

[iblancasa]

Component(s)

processor/k8sattributes

What happened?

Description

The documentation claims replicasets permissions are only needed when using when using k8s.deployment.uid or k8s.deployment.name:

If you'd like to set up the k8sattributesprocessor to receive telemetry from across namespaces, it will need get, watch and list permissions on both pods and namespaces resources, for all namespaces and pods included in the configured filters. Additionally, when using k8s.deployment.uid or k8s.deployment.name the processor also needs get, watch and list permissions for replicasets resources.

But that is not correct because when providing this configuration:

    processors:
      k8sattributes: {}

This error appears in the OpenTelemetry Collector logs:

E0407 06:56:47.446856       1 reflector.go:147] k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1.ReplicaSet: failed to list *v1.ReplicaSet: replicasets.apps is forbidden: User "system:serviceaccount:opentelemetry:otel-collector" cannot list resource "replicasets" in API group "apps" at the cluster scope

Collector version

0.97.0

Environment information

Environment

OS: (e.g., "Ubuntu 20.04")
Compiler(if manually compiled): (e.g., "go 14.2")

OpenTelemetry Collector configuration

No response

Log output

No response

Additional context

No response

[github-actions]

Pinging code owners:

• processor/k8sattributes: @dmitryax @rmfitzpatrick @fatsheep9146 @TylerHelmuth

See Adding Labels via Comments if you do not have permissions to add labels yourself.