Use fine-grained permissions for kubeletstats receiver

[dashpole]

Part of #2056

Collector PR: open-telemetry/opentelemetry-collector-contrib#46187

Operator PR: open-telemetry/opentelemetry-operator#4712

Documentation for kubelet subresource access: https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/#fine-grained-authorization

This will work for 1.33+ clusters.

[dashpole]

fixed

[TylerHelmuth]

@dashpole does this need to wait for any operator/collector releases or is nodes/pods already compatible with the code? How does this affect users on <1.33?

[dashpole]

@TylerHelmuth This also needs to somehow switch on the k8s version if we want it to work on k8s clusters less than 1.33. Is there a way to do that in this repo?

[TylerHelmuth]

@dashpole you should be able to use some of the built-in objects to check the k8s version or if the specific api capability exists: https://helm.sh/docs/chart_template_guide/builtin_objects/

[dashpole]

Notes from the operator SIG meeting:

• Don't trust the kubernetes version from helm. Templating variable built in from the kube server version could be from a "fake" server in CI systems.
• The guarantee we make for 1.24+ support is probably not accurate. We almost certainly use features from future versions.
• We will discuss this on the issue. I will move this to a draft until we've resolved how to accomplish this.