update thanos example rbac

prometheus-operator · Oct 3, 2020 · e586769 · e586769
1 parent 434f9f7
commit e586769
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/example/thanos/prometheus-role-binding.yaml → ...anos/prometheus-cluster-role-binding.yaml b/example/thanos/prometheus-role-binding.yaml → ...anos/prometheus-cluster-role-binding.yaml
@@ -1,11 +1,11 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: prometheus-self
   namespace: default
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
+  kind: ClusterRole
   name: prometheus-self
 subjects:
 - kind: ServiceAccount

diff --git a/example/thanos/prometheus-role.yaml → example/thanos/prometheus-cluster-role.yaml b/example/thanos/prometheus-role.yaml → example/thanos/prometheus-cluster-role.yaml
@@ -1,5 +1,5 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: prometheus-self
   namespace: default
@@ -8,10 +8,17 @@ rules:
   - ""
   resources:
   - nodes
+  - nodes/metrics
   - services
   - endpoints
   - pods
   verbs:
   - get
   - list
   - watch
+- apiGroups: [""]
+  resources:
+  - configmaps
+  verbs: ["get"]
+- nonResourceURLs: ["/metrics"]
+  verbs: ["get"]