1 {{- if and .Values.prometheus.enabled .Values.global.rbac.create }}
2 apiVersion: rbac.authorization.k8s.io/v1
5 name: {{ template "prometheus-operator.fullname" . }}-prometheus
7 app: {{ template "prometheus-operator.name" . }}-prometheus
8 {{ include "prometheus-operator.labels" . | indent 4 }}
18 # This permission are not in the prometheus-operator repo
19 # they're grabbed from https://github.com/prometheus/prometheus/blob/master/documentation/examples/rbac-setup.yml
27 verbs: ["get", "list", "watch"]
32 verbs: ["get", "list", "watch"]
33 - nonResourceURLs: ["/metrics"]