diff --git a/jsonnet/kube-prometheus/prometheus-operator/prometheus-operator.libsonnet b/jsonnet/kube-prometheus/prometheus-operator/prometheus-operator.libsonnet index 3286402632eb3decc8241537304a1ae197d14bdf..365553d605f07beebbc6d5f7d0461961f06c3144 100644 --- a/jsonnet/kube-prometheus/prometheus-operator/prometheus-operator.libsonnet +++ b/jsonnet/kube-prometheus/prometheus-operator/prometheus-operator.libsonnet @@ -33,13 +33,6 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet'; local clusterRole = k.rbac.v1.clusterRole; local policyRule = clusterRole.rulesType; - local extensionsRule = policyRule.new() + - policyRule.withApiGroups(['extensions']) + - policyRule.withResources([ - 'thirdpartyresources', - ]) + - policyRule.withVerbs(['*']); - local apiExtensionsRule = policyRule.new() + policyRule.withApiGroups(['apiextensions.k8s.io']) + policyRule.withResources([ @@ -102,7 +95,7 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet'; ]) + policyRule.withVerbs(['list', 'watch']); - local rules = [extensionsRule, apiExtensionsRule, monitoringRule, appsRule, coreRule, podRule, routingRule, nodeRule, namespaceRule]; + local rules = [apiExtensionsRule, monitoringRule, appsRule, coreRule, podRule, routingRule, nodeRule, namespaceRule]; clusterRole.new() + clusterRole.mixin.metadata.withName('prometheus-operator') + diff --git a/manifests/0prometheus-operator-clusterRole.yaml b/manifests/0prometheus-operator-clusterRole.yaml index 8c85391fc70d1ad1b040c6f76fea660486fd013f..94f5ce09a85a89f54eb0761a0e92b7a789544a98 100644 --- a/manifests/0prometheus-operator-clusterRole.yaml +++ b/manifests/0prometheus-operator-clusterRole.yaml @@ -3,12 +3,6 @@ kind: ClusterRole metadata: name: prometheus-operator rules: -- apiGroups: - - extensions - resources: - - thirdpartyresources - verbs: - - '*' - apiGroups: - apiextensions.k8s.io resources: