|
0
|
1 apiVersion: rbac.authorization.k8s.io/v1
|
|
|
2 kind: ClusterRole
|
|
|
3 metadata:
|
|
|
4 name: victoriametrics
|
|
|
5 rules:
|
|
|
6 - apiGroups: [""]
|
|
|
7 resources:
|
|
|
8 - nodes
|
|
|
9 - nodes/metrics
|
|
|
10 - nodes/proxy
|
|
|
11 - services
|
|
|
12 - endpoints
|
|
|
13 - pods
|
|
|
14 verbs: ["get", "list", "watch"]
|
|
|
15 - apiGroups:
|
|
|
16 - extensions
|
|
|
17 resources:
|
|
|
18 - ingresses
|
|
|
19 verbs: ["get", "list", "watch"]
|
|
|
20 - nonResourceURLs: ["/metrics"]
|
|
|
21 verbs: ["get"]
|
|
|
22 ---
|
|
|
23 apiVersion: v1
|
|
|
24 kind: ServiceAccount
|
|
|
25 metadata:
|
|
|
26 name: victoriametrics
|
|
|
27 ---
|
|
|
28 apiVersion: rbac.authorization.k8s.io/v1
|
|
|
29 kind: ClusterRoleBinding
|
|
|
30 metadata:
|
|
|
31 name: victoriametrics
|
|
|
32 roleRef:
|
|
|
33 apiGroup: rbac.authorization.k8s.io
|
|
|
34 kind: ClusterRole
|
|
|
35 name: victoriametrics
|
|
|
36 subjects:
|
|
|
37 - kind: ServiceAccount
|
|
|
38 name: victoriametrics
|
|
|
39 namespace: default
|
|
|
40 # # couldn't get prometheus to read the per-node telegraf metrics as 'prometheus' account
|
|
|
41 # - kind: ServiceAccount
|
|
|
42 # name: default
|
|
|
43 # namespace: default |
