From d1f401a73db369899a3af513ea370ae99cb9dbb4 Mon Sep 17 00:00:00 2001
From: viperstars <viperstars@163.com>
Date: Mon, 29 Mar 2021 14:19:35 +0800
Subject: [PATCH] add cluster role to list and watch ingresses in api group
"networking.k8s.io"
---
.../components/prometheus.libsonnet | 5 ++++
.../prometheus-roleSpecificNamespaces.yaml | 24 +++++++++++++++++++
2 files changed, 29 insertions(+)
diff --git a/jsonnet/kube-prometheus/components/prometheus.libsonnet b/jsonnet/kube-prometheus/components/prometheus.libsonnet
index 7d0d0729..8474428e 100644
--- a/jsonnet/kube-prometheus/components/prometheus.libsonnet
+++ b/jsonnet/kube-prometheus/components/prometheus.libsonnet
@@ -229,6 +229,11 @@ function(params) {
resources: ['ingresses'],
verbs: ['get', 'list', 'watch'],
},
+ {
+ apiGroups: ['networking.k8s.io'],
+ resources: ['ingresses'],
+ verbs: ['get', 'list', 'watch'],
+ },
],
};
{
diff --git a/manifests/prometheus-roleSpecificNamespaces.yaml b/manifests/prometheus-roleSpecificNamespaces.yaml
index 1bc40041..de5bca6e 100644
--- a/manifests/prometheus-roleSpecificNamespaces.yaml
+++ b/manifests/prometheus-roleSpecificNamespaces.yaml
@@ -29,6 +29,14 @@ items:
- get
- list
- watch
+ - apiGroups:
+ - networking.k8s.io
+ resources:
+ - ingresses
+ verbs:
+ - get
+ - list
+ - watch
- apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
@@ -58,6 +66,14 @@ items:
- get
- list
- watch
+ - apiGroups:
+ - networking.k8s.io
+ resources:
+ - ingresses
+ verbs:
+ - get
+ - list
+ - watch
- apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
@@ -87,4 +103,12 @@ items:
- get
- list
- watch
+ - apiGroups:
+ - networking.k8s.io
+ resources:
+ - ingresses
+ verbs:
+ - get
+ - list
+ - watch
kind: RoleList
--
GitLab