From 08e9149454fccb1df8e4ab7a3c269e3774d31407 Mon Sep 17 00:00:00 2001
From: MichaelKatsoulis <michaelkatsoulis88@gmail.com>
Date: Thu, 1 Jul 2021 15:35:03 +0300
Subject: [PATCH] Review updates

---
 .../kubernetes/elastic-agent-managed-kubernetes.yaml   | 10 ++++++++--
 .../elastic-agent-managed-daemonset.yaml               |  6 ++++--
 .../elastic-agent-managed-role.yaml                    |  4 ++++
 3 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml b/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml
index 4f6d930e8e97..dc9fd86e6af8 100644
--- a/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml
+++ b/deploy/kubernetes/elastic-agent-managed-kubernetes.yaml
@@ -26,10 +26,12 @@ spec:
           env:
             - name: FLEET_ENROLL
               value: "1"
+              # Set to true in case of insecure or unverified HTTP
             - name: FLEET_INSECURE
-              value: "1"
+              value: false
+              # The ip:port pair of fleet server
             - name: FLEET_URL
-              value: "fleet_server_ip:port"
+              value: "https://fleet-server:8220"
             - name: KIBANA_HOST
               value: "http://kibana:5601"
             - name: KIBANA_FLEET_USERNAME
@@ -157,6 +159,10 @@ rules:
       - nodes/stats
     verbs:
       - get
+  - apiGroups: [ "batch" ]
+    resources:
+      - jobs
+    verbs: [ "get", "list", "watch" ]
   # required for apiserver
   - nonResourceURLs:
       - "/metrics"
diff --git a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml
index bced76ac4206..0efd907a84d2 100644
--- a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml
+++ b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml
@@ -26,10 +26,12 @@ spec:
           env:
             - name: FLEET_ENROLL
               value: "1"
+              # Set to true in case of insecure or unverified HTTP
             - name: FLEET_INSECURE
-              value: "1"
+              value: false
+              # The ip:port pair of fleet server
             - name: FLEET_URL
-              value: "fleet_server_ip:port"
+              value: "https://fleet-server:8220"
             - name: KIBANA_HOST
               value: "http://kibana:5601"
             - name: KIBANA_FLEET_USERNAME
diff --git a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml
index 71c26085c272..37d159333cde 100644
--- a/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml
+++ b/deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-role.yaml
@@ -35,6 +35,10 @@ rules:
       - nodes/stats
     verbs:
       - get
+  - apiGroups: [ "batch" ]
+    resources:
+      - jobs
+    verbs: [ "get", "list", "watch" ]
   # required for apiserver
   - nonResourceURLs:
       - "/metrics"