kube-prometheus: Update RBAC for kube-state-metrics

kube-state-metrics needs additional permissions for replicationcontrollers, limitranges, and services (otherwise the API server logs are flooded with RBAC DENY messages)
2017-06-29 12:44:53 -04:00
parent a5533a4f6c
commit 5a5bfab855
1 changed files with 3 additions and 0 deletions
--- a/manifests/kube-state-metrics/kube-state-metrics-cluster-role.yaml
+++ b/manifests/kube-state-metrics/kube-state-metrics-cluster-role.yaml
@@ -7,7 +7,10 @@ rules:
  resources:
  - nodes
  - pods
+  - services
  - resourcequotas
+  - replicationcontrollers
+  - limitranges
  verbs: ["list", "watch"]
 - apiGroups: ["extensions"]
  resources: