1---
2apiVersion: v1
3kind: ServiceAccount
4metadata:
5 name: prometheus
6---
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRole
9metadata:
10 name: prometheus
11rules:
12- apiGroups: [""]
13 resources:
14 - nodes
15 - services
16 - endpoints
17 - pods
18 verbs: ["get", "list", "watch"]
19- apiGroups: [""]
20 resources:
21 - configmaps
22 verbs: ["get"]
23- nonResourceURLs: ["/metrics"]
24 verbs: ["get"]
25---
26apiVersion: rbac.authorization.k8s.io/v1
27kind: ClusterRoleBinding
28metadata:
29 name: prometheus
30roleRef:
31 apiGroup: rbac.authorization.k8s.io
32 kind: ClusterRole
33 name: prometheus
34subjects:
35- kind: ServiceAccount
36 name: prometheus
37 namespace: default
View as plain text