From 9911e843c2b8bd25c22753fb7d1761ae8605737b Mon Sep 17 00:00:00 2001
From: Vladislav Dedushkin <v.dedushkin@miops.dev>
Date: Sun, 8 Mar 2026 17:58:04 +0400
Subject: [PATCH 1/2] add values for kubectl image

---
 .../templates/kubernetes-nbresource.yaml               |  6 ++++--
 charts/netbird-operator-config/values.yaml             | 10 ++++++++++
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml b/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
index 5241185..fac6a90 100644
--- a/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
+++ b/charts/netbird-operator-config/templates/kubernetes-nbresource.yaml
@@ -24,7 +24,8 @@ spec:
     spec:
       initContainers:
       - name: wait-network-ready
-        image: "netbirdio/kubectl:latest"
+        image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
         command:
         - sh
         - -c
@@ -32,7 +33,8 @@ spec:
         - kubectl wait --for 'jsonpath={.status.networkID}' -n {{ $routerNS }} nbroutingpeer router;
       containers:
       - name: apply-nbresource
-        image: "netbirdio/kubectl:latest"
+        image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
         env:
         - name: NBRESOURCE_VALUE
           value: |
diff --git a/charts/netbird-operator-config/values.yaml b/charts/netbird-operator-config/values.yaml
index b9c187a..a95747d 100644
--- a/charts/netbird-operator-config/values.yaml
+++ b/charts/netbird-operator-config/values.yaml
@@ -5,6 +5,16 @@ cluster:
 # Create router per namespace, useful for strict networking requirements
 namespacedNetworks: false
 
+image:
+  # Set kubectl image registry
+  registry: docker.io
+  # Set kubectl image repository
+  repository: netbirdio/kubectl
+  # This sets the pull policy for images
+  pullPolicy: IfNotPresent
+  # Sets kubectl image tag
+  tag: "latest"
+
 router:
   # Deploy routing peer(s)
   enabled: false

From f527e9dbdcbd5297dd46953124945fa09fc33947 Mon Sep 17 00:00:00 2001
From: Vladislav Dedushkin <v.dedushkin@miops.dev>
Date: Sun, 8 Mar 2026 18:12:04 +0400
Subject: [PATCH 2/2] add missing verbs

---
 charts/netbird-operator-config/templates/rbac.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/charts/netbird-operator-config/templates/rbac.yaml b/charts/netbird-operator-config/templates/rbac.yaml
index 56f2ea6..ade413b 100644
--- a/charts/netbird-operator-config/templates/rbac.yaml
+++ b/charts/netbird-operator-config/templates/rbac.yaml
@@ -16,12 +16,15 @@ rules:
   - watch
   - create
   - delete
+  - get
 - apiGroups:
   - netbird.io
   resources:
   - nbroutingpeers
   verbs:
   - get
+  - list
+  - watch
 - apiGroups:
   - netbird.io
   resources: