1apiVersion: rbac.authorization.k8s.io/v1
2kind: ClusterRole
3metadata:
4 name: system:metrics-server
5 labels:
6 kubernetes.io/cluster-service: "true"
7 addonmanager.kubernetes.io/mode: Reconcile
8rules:
9 - apiGroups: [""]
10 resources:
11 - nodes/metrics
12 verbs:
13 - get
14 - apiGroups: [""]
15 resources:
16 - pods
17 - nodes
18 verbs:
19 - get
20 - list
21 - watch
22 - apiGroups: ["apps"]
23 resources:
24 - deployments
25 resourceNames:
26 - metrics-server-v0.7.0
27 verbs:
28 - get
29 - patch
30 - nonResourceURLs:
31 - /metrics
32 verbs:
33 - get
34---
35apiVersion: rbac.authorization.k8s.io/v1
36kind: ClusterRoleBinding
37metadata:
38 name: system:metrics-server
39 labels:
40 kubernetes.io/cluster-service: "true"
41 addonmanager.kubernetes.io/mode: Reconcile
42roleRef:
43 apiGroup: rbac.authorization.k8s.io
44 kind: ClusterRole
45 name: system:metrics-server
46subjects:
47- kind: ServiceAccount
48 name: metrics-server
49 namespace: kube-system
View as plain text