kubernetes/cluster/addons/metrics-server/resource-reader.yaml
Damien Grisonnet 3fd40ffb0e addons/metrics-server: fix nanny rbac permissions
Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2023-07-18 10:37:55 +02:00

50 lines
988 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: system:metrics-server
labels:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
rules:
- apiGroups: [""]
resources:
- nodes/metrics
verbs:
- get
- apiGroups: [""]
resources:
- pods
- nodes
verbs:
- get
- list
- watch
- apiGroups: ["apps"]
resources:
- deployments
resourceNames:
- metrics-server-v0.6.3
verbs:
- get
- patch
- nonResourceURLs:
- /metrics
verbs:
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: system:metrics-server
labels:
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:metrics-server
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system