kube-state-metrics-clusterrole.yaml 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110
  1. apiVersion: rbac.authorization.k8s.io/v1
  2. kind: ClusterRole
  3. metadata:
  4. labels:
  5. app.kubernetes.io/component: exporter
  6. app.kubernetes.io/name: kube-state-metrics
  7. app.kubernetes.io/part-of: kube-prometheus
  8. app.kubernetes.io/version: 2.4.2
  9. name: kube-state-metrics
  10. rules:
  11. - apiGroups:
  12. - ""
  13. resources:
  14. - configmaps
  15. - secrets
  16. - nodes
  17. - pods
  18. - services
  19. - resourcequotas
  20. - replicationcontrollers
  21. - limitranges
  22. - persistentvolumeclaims
  23. - persistentvolumes
  24. - namespaces
  25. - endpoints
  26. verbs:
  27. - list
  28. - watch
  29. - apiGroups:
  30. - apps
  31. resources:
  32. - statefulsets
  33. - daemonsets
  34. - deployments
  35. - replicasets
  36. verbs:
  37. - list
  38. - watch
  39. - apiGroups:
  40. - batch
  41. resources:
  42. - cronjobs
  43. - jobs
  44. verbs:
  45. - list
  46. - watch
  47. - apiGroups:
  48. - autoscaling
  49. resources:
  50. - horizontalpodautoscalers
  51. verbs:
  52. - list
  53. - watch
  54. - apiGroups:
  55. - authentication.k8s.io
  56. resources:
  57. - tokenreviews
  58. verbs:
  59. - create
  60. - apiGroups:
  61. - authorization.k8s.io
  62. resources:
  63. - subjectaccessreviews
  64. verbs:
  65. - create
  66. - apiGroups:
  67. - policy
  68. resources:
  69. - poddisruptionbudgets
  70. verbs:
  71. - list
  72. - watch
  73. - apiGroups:
  74. - certificates.k8s.io
  75. resources:
  76. - certificatesigningrequests
  77. verbs:
  78. - list
  79. - watch
  80. - apiGroups:
  81. - storage.k8s.io
  82. resources:
  83. - storageclasses
  84. - volumeattachments
  85. verbs:
  86. - list
  87. - watch
  88. - apiGroups:
  89. - admissionregistration.k8s.io
  90. resources:
  91. - mutatingwebhookconfigurations
  92. - validatingwebhookconfigurations
  93. verbs:
  94. - list
  95. - watch
  96. - apiGroups:
  97. - networking.k8s.io
  98. resources:
  99. - networkpolicies
  100. - ingresses
  101. verbs:
  102. - list
  103. - watch
  104. - apiGroups:
  105. - coordination.k8s.io
  106. resources:
  107. - leases
  108. verbs:
  109. - list
  110. - watch