Merge pull request #2349 from squat/tightenrole

 contrib/kube-prometheus: remove node role

jsonnet/kube-prometheus/prometheus/prometheus.libsonnet

@@ -129,7 +129,6 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet';
       local coreRule = policyRule.new() +
                        policyRule.withApiGroups(['']) +
                        policyRule.withResources([
-                         'nodes',
                          'services',
                          'endpoints',
                          'pods',

jsonnetfile.lock.json

@@ -8,7 +8,7 @@
                     "subdir": "contrib/kube-prometheus/jsonnet/kube-prometheus"
                 }
             },
-            "version": "9c0d2e34fa0a8bc22049e50bae46f4bb87ec2045"
+            "version": "d5f758dc5d07b214cd5cdf639847ab0197f42f76"
         },
         {
             "name": "ksonnet",

manifests/prometheus-roleSpecificNamespaces.yaml

@@ -9,7 +9,6 @@ items:
   - apiGroups:
     - ""
     resources:
-    - nodes
     - services
     - endpoints
     - pods
@@ -26,7 +25,6 @@ items:
   - apiGroups:
     - ""
     resources:
-    - nodes
     - services
     - endpoints
     - pods
@@ -43,7 +41,6 @@ items:
   - apiGroups:
     - ""
     resources:
-    - nodes
     - services
     - endpoints
     - pods