--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: grafana-agent labels: app.kubernetes.io/instance: k8s app.kubernetes.io/component: exporter app.kubernetes.io/name: grafana-agent app.kubernetes.io/managed-by: {{ $.Release.Service }} app.kubernetes.io/part-of: {{ $.Chart.Name }} app.kubernetes.io/version: {{ $.Chart.Version }} rules: - apiGroups: - "" resources: - nodes - nodes/proxy - services - endpoints - pods - events verbs: - get - list - watch - nonResourceURLs: - /metrics verbs: - get - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create