summaryrefslogtreecommitdiffstats
path: root/roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2017-10-05 00:38:10 -0700
committerGitHub <noreply@github.com>2017-10-05 00:38:10 -0700
commit64b5f2f08f813910cb608961a7e58e0d27142a9f (patch)
treeac71081acbdcc5fce1a424cb4c653760604d128b /roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2
parent5080e6c5c5fd26128280cebf63632d3190b29e64 (diff)
parent76e00ca0b6900c6c405f0fd9ca3e12b032498e22 (diff)
downloadopenshift-64b5f2f08f813910cb608961a7e58e0d27142a9f.tar.gz
openshift-64b5f2f08f813910cb608961a7e58e0d27142a9f.tar.bz2
openshift-64b5f2f08f813910cb608961a7e58e0d27142a9f.tar.xz
openshift-64b5f2f08f813910cb608961a7e58e0d27142a9f.zip
Merge pull request #5564 from jcantrill/es_prom
Automatic merge from submit-queue. Add logging es prometheus endpoint This PR adds changes to add a prometheus endpoint to the logging elasticsearch pod
Diffstat (limited to 'roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2')
-rw-r--r--roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j231
1 files changed, 31 insertions, 0 deletions
diff --git a/roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2 b/roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2
new file mode 100644
index 000000000..d9800e5a5
--- /dev/null
+++ b/roles/openshift_logging_elasticsearch/templates/logging-metrics-role.j2
@@ -0,0 +1,31 @@
+---
+apiVersion: v1
+kind: List
+items:
+- apiVersion: rbac.authorization.k8s.io/v1beta1
+ kind: Role
+ metadata:
+ annotations:
+ rbac.authorization.kubernetes.io/autoupdate: "true"
+ name: prometheus-metrics-viewer
+ namespace: {{ namespace }}
+ rules:
+ - apiGroups:
+ - metrics.openshift.io
+ resources:
+ - prometheus
+ verbs:
+ - view
+- apiVersion: rbac.authorization.k8s.io/v1beta1
+ kind: RoleBinding
+ metadata:
+ name: prometheus-metrics-viewer
+ namespace: {{ namespace }}
+ roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: prometheus-metrics-viewer
+ subjects:
+ - kind: ServiceAccount
+ namespace: {{ role_namespace }}
+ name: {{ role_user }}