From 48651090a65c28a7630a83c7051d56e9821de441 Mon Sep 17 00:00:00 2001 From: Zach Aller <zachaller@users.noreply.github.com> Date: Tue, 9 Jul 2019 16:28:17 -0500 Subject: [PATCH] Update kube-state-metrics.libsonnet With the bump to kube-state-metrics v1.6 they added ingress and certificates but this updates the rbac rules so that those work with the new version. --- .../kube-state-metrics/kube-state-metrics.libsonnet | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/jsonnet/kube-prometheus/kube-state-metrics/kube-state-metrics.libsonnet b/jsonnet/kube-prometheus/kube-state-metrics/kube-state-metrics.libsonnet index d20ac609..8f037883 100644 --- a/jsonnet/kube-prometheus/kube-state-metrics/kube-state-metrics.libsonnet +++ b/jsonnet/kube-prometheus/kube-state-metrics/kube-state-metrics.libsonnet @@ -67,6 +67,7 @@ local k = import 'ksonnet/ksonnet.beta.4/k.libsonnet'; 'daemonsets', 'deployments', 'replicasets', + 'ingresses', ]) + rulesType.withVerbs(['list', 'watch']); @@ -115,8 +116,15 @@ local k = import 'ksonnet/ksonnet.beta.4/k.libsonnet'; 'poddisruptionbudgets', ]) + rulesType.withVerbs(['list', 'watch']); + + local certificateRule = rulesType.new() + + rulesType.withApiGroups(['certificates.k8s.io']) + + rulesType.withResources([ + 'certificatesigningrequests', + ]) + + rulesType.withVerbs(['list', 'watch']); - local rules = [coreRule, extensionsRule, appsRule, batchRule, autoscalingRule, authenticationRole, authorizationRole, policyRule]; + local rules = [coreRule, extensionsRule, appsRule, batchRule, autoscalingRule, authenticationRole, authorizationRole, policyRule, certificateRule]; clusterRole.new() + clusterRole.mixin.metadata.withName('kube-state-metrics') + -- GitLab