| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748 |
- {{- if and .Values.rbac.create (empty .Values.server.useExistingClusterRoleName) -}}
- apiVersion: {{ template "rbac.apiVersion" . }}
- kind: ClusterRole
- metadata:
- labels:
- {{- include "prometheus.server.labels" . | nindent 4 }}
- name: {{ template "prometheus.server.fullname" . }}
- rules:
- {{- if .Values.podSecurityPolicy.enabled }}
- - apiGroups:
- - extensions
- resources:
- - podsecuritypolicies
- verbs:
- - use
- resourceNames:
- - {{ template "prometheus.server.fullname" . }}
- {{- end }}
- - apiGroups:
- - ""
- resources:
- - nodes
- - nodes/proxy
- - nodes/metrics
- - services
- - endpoints
- - pods
- - ingresses
- - configmaps
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - "extensions"
- - "networking.k8s.io"
- resources:
- - ingresses/status
- - ingresses
- verbs:
- - get
- - list
- - watch
- - nonResourceURLs:
- - "/metrics"
- verbs:
- - get
- {{- end }}
|
