We add a custom clusterrole which is aggregated to cluster-reader which grants get, list, watch on all monitoring.coreos.com resources. This should allow users which have cluster-reader look at Prometheus rules, ServiceMonitors etc. without having to impersonate cluster-admin.
Checklist
[X] The PR has a meaningful title. It will be used to auto generate the
changelog.
The PR has a meaningful description that sums up the change. It will be
linked in the changelog.
[X] PR contains a single logical change (to build a better changelog).
[ ] Update the documentation.
[X] Categorize the PR by adding one of the labels:
bug, enhancement, documentation, change, breaking, dependency
as they show up in the changelog.
We add a custom clusterrole which is aggregated to
cluster-readerwhich grantsget,list,watchon allmonitoring.coreos.comresources. This should allow users which have cluster-reader look at Prometheus rules, ServiceMonitors etc. without having to impersonate cluster-admin.Checklist
bug,enhancement,documentation,change,breaking,dependencyas they show up in the changelog.