jsonnet: improve all-namespaces addon

Signed-off-by: paulfantom <pawel@krupa.net.pl>
This commit is contained in:
paulfantom 2021-05-04 13:09:22 +02:00
parent 6d603cf7a9
commit feee269fdb
No known key found for this signature in database
GPG Key ID: 12AE0185401674E7

View File

@ -1,11 +1,22 @@
{ {
prometheus+:: { prometheus+:: {
clusterRole+: { clusterRole+: {
rules+: [{ rules+: [
apiGroups: [''], {
resources: ['services', 'endpoints', 'pods'], apiGroups: [''],
verbs: ['get', 'list', 'watch'], resources: ['services', 'endpoints', 'pods'],
}], verbs: ['get', 'list', 'watch'],
},
{
apiGroups: ['networking.k8s.io'],
resources: ['ingresses'],
verbs: ['get', 'list', 'watch'],
},
],
}, },
// There is no need for specific namespaces RBAC as this addon grants
// all required permissions for every namespace
roleBindingSpecificNamespaces:: null,
roleSpecificNamespaces:: null,
}, },
} }