---
apiVersion: {{ include "rbacversion" . }}
kind: ClusterRole
metadata:
  name: prometheus
rules:
- apiGroups:
  - ""
  resources:
  - nodes
  - services
  - endpoints
  - pods
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - nodes/metrics
  # TODO: remove entry below once legacy Prometheus are gone (ones using proxy to scrape kubelets)
  - nodes/proxy
  verbs:
  - get
- nonResourceURLs:
  - /metrics
  # TODO: remove entry below once legacy Prometheus are gone (ones using proxy to scrape kubelets)
  - /metrics/*
  verbs:
  - get