1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: prometheus
5rules:
6- resources:
7 - nodes
8 - nodes/metrics
9 - services
10 - endpoints
11 - pods
12 apiGroups: [""]
13 verbs: ["get", "list", "watch"]
14- resources:
15 - configmaps
16 apiGroups: [""]
17 verbs: ["get"]
18- resources:
19 - ingresses
20 apiGroups:
21 - networking.k8s.io
22 verbs: ["get", "list", "watch"]
23- nonResourceURLs: ["/metrics"]
24 verbs: ["get"]
25---
26apiVersion: rbac.authorization.k8s.io/v1
27kind: ClusterRoleBinding
28metadata:
29 name: prometheus
30roleRef:
31 name: prometheus
32 kind: ClusterRole
33 apiGroup: rbac.authorization.k8s.io
34subjects:
35- name: prometheus
36 namespace: prometheus
37 kind: ServiceAccount
View as plain text