vnfs/DAaaS/deploy/operator/charts/prometheus-operator/templates/prometheus-operator/clusterrole.yaml

   1 {{- if and .Values.prometheusOperator.enabled .Values.global.rbac.create }}
   2 apiVersion: rbac.authorization.k8s.io/v1
   3 kind: ClusterRole
   4 metadata:
   5   name: {{ template "prometheus-operator.fullname" . }}-operator
   6   labels:
   7     app: {{ template "prometheus-operator.name" . }}-operator
   8 {{ include "prometheus-operator.labels" . | indent 4 }}
   9 rules:
  10 - apiGroups:
  11   - apiextensions.k8s.io
  12   resources:
  13   - customresourcedefinitions
  14   verbs:
  15   - '*'
  16 - apiGroups:
  17   - {{ .Values.prometheusOperator.crdApiGroup | default "monitoring.coreos.com" }}
  18   resources:
  19   - alertmanagers
  20   - prometheuses
  21   - prometheuses/finalizers
  22   - alertmanagers/finalizers
  23   - servicemonitors
  24   - prometheusrules
  25   verbs:
  26   - '*'
  27 - apiGroups:
  28   - apps
  29   resources:
  30   - statefulsets
  31   verbs:
  32   - '*'
  33 - apiGroups:
  34   - ""
  35   resources:
  36   - configmaps
  37   - secrets
  38   verbs:
  39   - '*'
  40 - apiGroups:
  41   - ""
  42   resources:
  43   - pods
  44   verbs:
  45   - list
  46   - delete
  47 - apiGroups:
  48   - ""
  49   resources:
  50   - services
  51   - endpoints
  52   verbs:
  53   - get
  54   - create
  55   - update
  56 - apiGroups:
  57   - ""
  58   resources:
  59   - nodes
  60   verbs:
  61   - list
  62   - watch
  63 - apiGroups:
  64   - ""
  65   resources:
  66   - namespaces
  67   verbs:
  68   - get
  69   - list
  70   - watch
  71 {{- end }}