vnfs/DAaaS/deploy/operator/charts/prometheus-operator/templates/prometheus/clusterrole.yaml

   1 {{- if and .Values.prometheus.enabled .Values.global.rbac.create }}
   2 apiVersion: rbac.authorization.k8s.io/v1
   3 kind: ClusterRole
   4 metadata:
   5   name: {{ template "prometheus-operator.fullname" . }}-prometheus
   6   labels:
   7     app: {{ template "prometheus-operator.name" . }}-prometheus
   8 {{ include "prometheus-operator.labels" . | indent 4 }}
   9 rules:
  10 - apiGroups:
  11   - ""
  12   resources:
  13   - nodes/metrics
  14   verbs:
  15   - get
  16   - list
  17   - watch
  18 # This permission are not in the prometheus-operator repo
  19 # they're grabbed from https://github.com/prometheus/prometheus/blob/master/documentation/examples/rbac-setup.yml
  20 - apiGroups: [""]
  21   resources:
  22   - nodes
  23   - nodes/proxy
  24   - services
  25   - endpoints
  26   - pods
  27   verbs: ["get", "list", "watch"]
  28 - apiGroups:
  29   - extensions
  30   resources:
  31   - ingresses
  32   verbs: ["get", "list", "watch"]
  33 - nonResourceURLs: ["/metrics"]
  34   verbs: ["get"]
  35 {{- end }}