Merge pull request percona#180 from percona/PMM-10907-kube-state-metr…

…ics-permissions

PMM-10907 Added RBAC rules for kube-state-metrics

charts/pmm/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: pmm
 description: A Helm chart for Percona Monitoring and Management (PMM)
 type: application
-version: 0.3.9
+version: 0.3.10
 appVersion: "2.31.0"
 home: https://github.com/percona/pmm
 maintainers:

charts/pmm/templates/clusterrole.yaml

@@ -674,6 +674,76 @@ rules:
   - podsecuritypolicies
   verbs:
   - use
+
+# Kube-state-metrics
+- apiGroups:
+  - ""
+  resources:
+  - resourcequotas
+  - replicationcontrollers
+  - limitranges
+  - persistentvolumes
+  - namespaces
+  - endpoints
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - daemonsets
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - certificatesigningrequests
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - networkpolicies
+  - ingresses
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - list
+  - watch
 # DBaaS
 - apiGroups:
   - ""
@@ -685,7 +755,6 @@ rules:
   - configmaps/status
   - services
   - persistentvolumeclaims
-  - secrets
   - nodes
   - secrets
   - serviceaccounts