41 lines
814 B
YAML
41 lines
814 B
YAML
apiVersion: rbac.authorization.k8s.io/v1
|
||
kind: ClusterRole
|
||
metadata:
|
||
name: prometheus
|
||
rules:
|
||
- apiGroups: [""]
|
||
resources:
|
||
- nodes
|
||
- nodes/proxy
|
||
- services
|
||
- endpoints
|
||
- pods
|
||
verbs: ["get", "list", "watch"]
|
||
- apiGroups:
|
||
- extensions
|
||
resources:
|
||
- ingresses
|
||
verbs: ["get", "list", "watch"]
|
||
- nonResourceURLs: ["/metrics"]
|
||
verbs: ["get"]
|
||
---
|
||
apiVersion: v1
|
||
kind: ServiceAccount
|
||
metadata:
|
||
name: prometheus
|
||
namespace: default
|
||
---
|
||
apiVersion: rbac.authorization.k8s.io/v1
|
||
kind: ClusterRoleBinding
|
||
metadata:
|
||
name: prometheus
|
||
roleRef:
|
||
apiGroup: rbac.authorization.k8s.io
|
||
kind: ClusterRole
|
||
name: prometheus
|
||
subjects:
|
||
- kind: ServiceAccount
|
||
name: prometheus
|
||
namespace: default
|
||
# ClusterRole是全局的，不需要指定命名空间
|