8c66f6c955
Dozzle pod was crashing with: pods.metrics.k8s.io is forbidden: User "system:serviceaccount:dozzle:dozzle" cannot list resource "pods" in API group "metrics.k8s.io" at the cluster scope Added permission for the metrics.k8s.io API group to allow Dozzle to collect pod metrics for its monitoring dashboard. Fixes: DEV-372 Co-Authored-By: Paperclip <noreply@paperclip.ing>
55 lines
745 B
YAML
55 lines
745 B
YAML
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: dozzle
|
|
namespace: dozzle
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: dozzle
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
- pods/log
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- metrics.k8s.io
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- list
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: dozzle
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: dozzle
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: dozzle
|
|
namespace: dozzle
|