From 0f4b76bc4407a773ffcde16eac8e95b9256830a9 Mon Sep 17 00:00:00 2001 From: Yong Wen Chua Date: Fri, 10 Jan 2020 16:40:33 +0800 Subject: [PATCH] [stable/prometheus] Add Missing ClusterRole Permissions for Kube-state-metrics (#20004) Signed-off-by: Yong Wen Chua --- stable/prometheus/Chart.yaml | 2 +- .../kube-state-metrics-clusterrole.yaml | 24 +++++++++++++++++++ 2 files changed, 25 insertions(+), 1 deletion(-) diff --git a/stable/prometheus/Chart.yaml b/stable/prometheus/Chart.yaml index 2705200da4..a3c2efa6fd 100644 --- a/stable/prometheus/Chart.yaml +++ b/stable/prometheus/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v1 name: prometheus -version: 10.0.0 +version: 10.0.1 appVersion: 2.15.2 description: Prometheus is a monitoring system and time series database. home: https://prometheus.io/ diff --git a/stable/prometheus/templates/kube-state-metrics-clusterrole.yaml b/stable/prometheus/templates/kube-state-metrics-clusterrole.yaml index 9f5be97537..f036c0fa1f 100644 --- a/stable/prometheus/templates/kube-state-metrics-clusterrole.yaml +++ b/stable/prometheus/templates/kube-state-metrics-clusterrole.yaml @@ -51,6 +51,7 @@ rules: - daemonsets - deployments - statefulsets + - replicasets verbs: - get - list @@ -77,6 +78,14 @@ rules: verbs: - list - watch + - apiGroups: + - storage.k8s.io + resources: + - storageclasses + - volumeattachments + verbs: + - list + - watch - apiGroups: - certificates.k8s.io resources: @@ -84,4 +93,19 @@ rules: verbs: - list - watch + - apiGroups: + - networking.k8s.io + resources: + - networkpolicies + verbs: + - list + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - validatingwebhookconfigurations + - mutatingwebhookconfigurations + verbs: + - list + - watch {{- end }}