5 files changed, 33 insertions(+), 0 deletions(-)

A monitoring/prometheus/clusterrole.yaml
A monitoring/prometheus/clusterrolebinding.yaml
M monitoring/prometheus/deployment.yaml
M monitoring/prometheus/kustomization.yaml
A monitoring/prometheus/serviceaccount.yaml

@@ 0,0 1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: prometheus
+rules:
+  - apiGroups: ['']
+    resources: [pods, nodes]
+    verbs: [get, list, watch]
+  - apiGroups: ['']
+    resources: [nodes/metrics]
+    verbs: [get]

@@ 0,0 1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  creationTimestamp: null
+  name: prometheus
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: prometheus
+subjects:
+- kind: ServiceAccount
+  name: prometheus
+  namespace: prometheus

@@ 14,6 14,7 @@ spec:
           volumeMounts:
             - name: configs
               mountPath: /etc/prometheus
+      serviceAccountName: prometheus
       volumes:
         - name: configs
           configMap:

@@ 10,3 10,6 @@ resources:
   - namespace.yaml
   - deployment.yaml
   - configmap.yaml
+  - serviceaccount.yaml
+  - clusterrole.yaml
+  - clusterrolebinding.yaml

@@ 0,0 1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  creationTimestamp: null
+  name: prometheus