freeleaps-ops/cluster/manifests/freeleaps-monitoring-system/rbac/rbac.yaml
zhenyus b7c11d2829 feat: update RBAC configurations and add Jenkinsfile for aml-services
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-05-12 09:56:54 +08:00

45 lines
1.3 KiB
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: prometheus-rules-contributor
rules:
- apiGroups: ["monitoring.coreos.com"]
resources: ["prometheusrules"]
verbs: ["create", "get", "list", "watch", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: prometheus-rules-contributor-binding
namespace: freeleaps-monitoring-system
subjects:
- kind: Group
name: mathmast:prometheus-rules-contributor
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: prometheus-rules-contributor
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: service-monitor-contributor
rules:
- apiGroups: ["monitoring.coreos.com"]
resources: ["servicemonitors"]
verbs: ["create", "get", "list", "watch", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: service-monitor-contributor-binding
namespace: freeleaps-monitoring-system
subjects:
- kind: Group
name: mathmast:service-monitor-contributor
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: service-monitor-contributor
apiGroup: rbac.authorization.k8s.io