comparison roles.yaml @ 0:7fe15c93585a

start
author drewp@bigasterisk.com
date Wed, 09 Feb 2022 00:20:56 -0800
parents
children
comparison
equal deleted inserted replaced
-1:000000000000 0:7fe15c93585a
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 name: victoriametrics
5 rules:
6 - apiGroups: [""]
7 resources:
8 - nodes
9 - nodes/metrics
10 - nodes/proxy
11 - services
12 - endpoints
13 - pods
14 verbs: ["get", "list", "watch"]
15 - apiGroups:
16 - extensions
17 resources:
18 - ingresses
19 verbs: ["get", "list", "watch"]
20 - nonResourceURLs: ["/metrics"]
21 verbs: ["get"]
22 ---
23 apiVersion: v1
24 kind: ServiceAccount
25 metadata:
26 name: victoriametrics
27 ---
28 apiVersion: rbac.authorization.k8s.io/v1
29 kind: ClusterRoleBinding
30 metadata:
31 name: victoriametrics
32 roleRef:
33 apiGroup: rbac.authorization.k8s.io
34 kind: ClusterRole
35 name: victoriametrics
36 subjects:
37 - kind: ServiceAccount
38 name: victoriametrics
39 namespace: default
40 # # couldn't get prometheus to read the per-node telegraf metrics as 'prometheus' account
41 # - kind: ServiceAccount
42 # name: default
43 # namespace: default