mirrors/kube-prometheus
1
0
Fork 0
mirror of https://github.com/prometheus-operator/kube-prometheus.git synced 2025-11-01 16:41:02 +01:00
Code Issues Projects Releases Wiki Activity

Turn alertmanager's and grafana's roles into clusterRoles

Browse Source 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
This commit is contained in:
ArthurSens 2021-03-12 21:14:39 +00:00
parent e8abcd3dc9
commit 478a18a6a7
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
View File

@ -54,9 +54,9 @@ local restrictedPodSecurityPolicy = {
restrictedPodSecurityPolicy: restrictedPodSecurityPolicy,
alertmanager+: {
role: {
clusterRole: {
apiVersion: 'rbac.authorization.k8s.io/v1',
kind: 'Role',
kind: 'ClusterRole',
metadata: {
name: 'alertmanager-' + $.values.alertmanager.name,
},
@ -68,15 +68,15 @@ local restrictedPodSecurityPolicy = {
}],
},
roleBinding: {
clusterRoleBinding: {
apiVersion: 'rbac.authorization.k8s.io/v1',
kind: 'RoleBinding',
kind: 'ClusterRoleBinding',
metadata: {
name: 'alertmanager-' + $.values.alertmanager.name,
},
roleRef: {
apiGroup: 'rbac.authorization.k8s.io',
kind: 'Role',
kind: 'ClusterRole',
name: 'alertmanager-' + $.values.alertmanager.name,
},
subjects: [{
@ -121,9 +121,9 @@ local restrictedPodSecurityPolicy = {
},
grafana+: {
role: {
clusterRole: {
apiVersion: 'rbac.authorization.k8s.io/v1',
kind: 'Role',
kind: 'ClusterRole',
metadata: {
name: 'grafana',
},
@ -135,15 +135,15 @@ local restrictedPodSecurityPolicy = {
}],
},
roleBinding: {
clusterRoleBinding: {
apiVersion: 'rbac.authorization.k8s.io/v1',
kind: 'RoleBinding',
kind: 'ClusterRoleBinding',
metadata: {
name: 'grafana',
},
roleRef: {
apiGroup: 'rbac.authorization.k8s.io',
kind: 'Role',
kind: 'ClusterRole',
name: 'grafana',
},
subjects: [{