Merge pull request #130 from sttts/sttts-manifest-servicemonitor-rbac

monitoring: move service monitor RBAC rules to manifests/
openshift · Nov 28, 2019 · fe00f63 · fe00f63
2 parents 10fc162 + a9b80bd
commit fe00f63
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/manifests/0000_90_openshift-controller-manager-operator_03_operand-servicemonitor.yaml b/manifests/0000_90_openshift-controller-manager-operator_03_operand-servicemonitor.yaml
@@ -1,3 +1,34 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: prometheus-k8s
+  namespace: openshift-controller-manager
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - services
+  - endpoints
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: prometheus-k8s
+  namespace: openshift-controller-manager
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: prometheus-k8s
+subjects:
+- kind: ServiceAccount
+  name: prometheus-k8s
+  namespace: openshift-monitoring
+---
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata: