33 lines
975 B
YAML
33 lines
975 B
YAML
# Source: kube-prometheus-stack/templates/prometheus/clusterrole.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: prometheus-kube-prometheus-prometheus
|
|
labels:
|
|
app: kube-prometheus-stack-prometheus
|
|
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/instance: prometheus
|
|
app.kubernetes.io/version: "58.7.2"
|
|
app.kubernetes.io/part-of: kube-prometheus-stack
|
|
chart: kube-prometheus-stack-58.7.2
|
|
release: "prometheus"
|
|
heritage: "Helm"
|
|
rules:
|
|
# This permission are not in the kube-prometheus repo
|
|
# they're grabbed from https://github.com/prometheus/prometheus/blob/master/documentation/examples/rbac-setup.yml
|
|
- apiGroups: [""]
|
|
resources:
|
|
- nodes
|
|
- nodes/metrics
|
|
- services
|
|
- endpoints
|
|
- pods
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups:
|
|
- "networking.k8s.io"
|
|
resources:
|
|
- ingresses
|
|
verbs: ["get", "list", "watch"]
|
|
- nonResourceURLs: ["/metrics", "/metrics/cadvisor"]
|
|
verbs: ["get"] |