rework rbac for grafana and add namespace question

Chart.yaml

@@ -4,7 +4,7 @@ annotations:
   catalog.cattle.io/certified: rancher
 name: caas-project-monitoring
 description: A Helm chart for Rancher Project Monitoring V3
-version: 0.0.19
+version: 0.0.20
 appVersion: "40.1.2"
 icon: https://raw.githubusercontent.com/caas-team/caas-project-monitoring/main/logo.png
 keywords:

questions.yaml

@@ -134,6 +134,11 @@ questions:
   group: "Grafana"
   show_subquestion_if: false
   subquestions:
+  - variable: kube-prometheus-stack.grafana.sidecar.datasources.searchNamespace
+    description: "A comma separated list of namespaces to view"
+    type: string
+    label: Grafana view namespaces (by comma)
+    group: "Grafana"
   - variable: kube-prometheus-stack.grafana.image.repository
     description: "Repository of Grafana Image"
     type: string

templates/caas-project-monitoring-rbac.yaml

@@ -55,6 +55,15 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - secrets
+  verbs:
+  - get
+  - watch
+  - list
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

values.yaml

@@ -266,8 +266,12 @@ kube-prometheus-stack:
       supplementalGroups:
       - 472
     rbac:
+      create: false
       pspEnabled: false
       namespaced: true
+    serviceAccount:
+      create: false
+      name: project-monitoring
     resources:
       limits:
         memory: 600Mi
@@ -308,11 +312,12 @@ kube-prometheus-stack:
         provider:
           allowUiUpdates: false
       datasources:
-        enabled: true
-        defaultDatasourceEnabled: true
         createPrometheusReplicasDatasources: false
+        defaultDatasourceEnabled: true
+        enabled: true
         label: grafana_datasource
         labelValue: "1"
+        searchNamespace: ""
     serviceMonitor:
       enabled: true
       path: "/metrics"