ClusterRoleBinding for grafana-serviceaccount to cluster-monitoring-view

OCP-on-NERC · Dec 6, 2023 · fc1e630 · fc1e630
1 parent 968d127
commit fc1e630
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/grafana/base/clusterrolebindings/grafana-serviceaccount-cluster-monitoring-view.yaml b/grafana/base/clusterrolebindings/grafana-serviceaccount-cluster-monitoring-view.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: grafana-serviceaccount-cluster-monitoring-view
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-monitoring-view
+subjects:
+- kind: ServiceAccount
+  name: grafana-serviceaccount
+  namespace: grafana
diff --git a/grafana/base/clusterrolebindings/kustomization.yaml b/grafana/base/clusterrolebindings/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - grafana-serviceaccount-cluster-monitoring-view.yaml
diff --git a/grafana/base/kustomization.yaml b/grafana/base/kustomization.yaml
@@ -4,6 +4,7 @@ resources:
   - operatorgroups
   - subscriptions
   - routes
+  - clusterrolebindings
 commonLabels:
   app.kubernetes.io/name: grafana
   app.kubernetes.io/component: grafana