prometheus-clusterrole.yaml
No OneTemporary
Actions

Authored By

Unknown

Size

1 KB

Referenced Files

None

Subscribers

None

prometheus-clusterrole.yaml
View Options

	{{- if .Values.prometheus.enabled -}}
	{{- if .Values.prometheus.clusterMonitoring -}}
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	name: prometheus
	rules:
	- apiGroups: [""]
	resources:
	- nodes
	- nodes/proxy
	- nodes/metrics
	- services
	- endpoints
	- pods
	verbs: ["get", "list", "watch"]
	- apiGroups:
	- extensions
	resources:
	- ingresses
	verbs: ["get", "list", "watch"]
	- nonResourceURLs: ["/metrics"]
	verbs: ["get"]
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRoleBinding
	metadata:
	name: prometheus
	roleRef:
	apiGroup: rbac.authorization.k8s.io
	kind: ClusterRole
	name: prometheus
	subjects:
	- kind: ServiceAccount
	namespace: {{ .Release.Namespace }}
	name: prometheusserviceaccount
	{{- end }}
	{{- if .Values.openshift -}}
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	name: prometheus
	rules:
	- apiGroups: [""]
	resources:
	- pods
	verbs: ["get", "list", "watch"]
	- apiGroups:
	- extensions
	resources:
	- ingresses
	verbs: ["get", "list", "watch"]
	- nonResourceURLs: ["/metrics"]
	verbs: ["get"]
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRoleBinding
	metadata:
	name: prometheus
	roleRef:
	apiGroup: rbac.authorization.k8s.io
	kind: ClusterRole
	name: prometheus
	subjects:
	- kind: ServiceAccount
	namespace: {{ .Release.Namespace }}
	name: default
	{{- end }}
	{{- end }}