diff --git a/jsonnet/kube-prometheus/addons/all-namespaces.libsonnet b/jsonnet/kube-prometheus/addons/all-namespaces.libsonnet index 843c1769b3c27cc393e71b79da294330fb71663a..34f831733350635d11c3efbc0239254328eb548d 100644 --- a/jsonnet/kube-prometheus/addons/all-namespaces.libsonnet +++ b/jsonnet/kube-prometheus/addons/all-namespaces.libsonnet @@ -1,11 +1,22 @@ { prometheus+:: { clusterRole+: { - rules+: [{ - apiGroups: [''], - resources: ['services', 'endpoints', 'pods'], - verbs: ['get', 'list', 'watch'], - }], + rules+: [ + { + apiGroups: [''], + resources: ['services', 'endpoints', 'pods'], + verbs: ['get', 'list', 'watch'], + }, + { + apiGroups: ['networking.k8s.io'], + resources: ['ingresses'], + verbs: ['get', 'list', 'watch'], + }, + ], }, + // There is no need for specific namespaces RBAC as this addon grants + // all required permissions for every namespace + roleBindingSpecificNamespaces:: null, + roleSpecificNamespaces:: null, }, }