easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

contrib/kube-prometheus: remove node role

Browse Source 
This commit removes get/list/watch on nodes for the Prometheus-k8s
instance, as Prometheus pods do not need that privilege for anything.
This commit is contained in:
Lucas Serven
2019-01-28 14:20:58 +01:00
parent d4ce83203c
commit fd697ffbff
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
jsonnet/kube-prometheus/prometheus/prometheus.libsonnet
View File

@@ -129,7 +129,6 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet';
local coreRule = policyRule.new() + local coreRule = policyRule.new() +
policyRule.withApiGroups(['']) + policyRule.withApiGroups(['']) +
policyRule.withResources([ policyRule.withResources([
'nodes',
'services', 'services',
'endpoints', 'endpoints',
'pods', 'pods',