Closed
Description
When deploying auditbeat on kubernetes with the provided manifest, the K8s enrichment is not working with the following error message:
failed to list *v1.Job: jobs.batch is forbidden: User "system:serviceaccount:kube-system:auditbeat" cannot list resource "jobs" in API group "batch" at the cluster scope
The requirements have been added to most beats in #30637 but it looks like auditbeat was missed