diff --git a/grafana/base/clusterrolebindings/grafana-serviceaccount-cluster-monitoring-view.yaml b/grafana/base/clusterrolebindings/grafana-serviceaccount-cluster-monitoring-view.yaml new file mode 100644 index 00000000..c2534d98 --- /dev/null +++ b/grafana/base/clusterrolebindings/grafana-serviceaccount-cluster-monitoring-view.yaml @@ -0,0 +1,12 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: grafana-serviceaccount-cluster-monitoring-view +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-monitoring-view +subjects: +- kind: ServiceAccount + name: grafana-serviceaccount + namespace: grafana diff --git a/grafana/base/clusterrolebindings/kustomization.yaml b/grafana/base/clusterrolebindings/kustomization.yaml new file mode 100644 index 00000000..fd973d2f --- /dev/null +++ b/grafana/base/clusterrolebindings/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - grafana-serviceaccount-cluster-monitoring-view.yaml diff --git a/grafana/base/kustomization.yaml b/grafana/base/kustomization.yaml index 89790cc5..e408c25e 100644 --- a/grafana/base/kustomization.yaml +++ b/grafana/base/kustomization.yaml @@ -4,6 +4,7 @@ resources: - operatorgroups - subscriptions - routes + - clusterrolebindings commonLabels: app.kubernetes.io/name: grafana app.kubernetes.io/component: grafana