rancher-charts/charts/rancher-monitoring/16.6.0/templates/rancher-monitoring/config-role.yaml

{{- if and .Values.global.rbac.create .Values.global.rbac.userRoles.create }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: monitoring-config-admin
  namespace: {{ template "kube-prometheus-stack.namespace" . }}
  labels: {{ include "kube-prometheus-stack.labels" . | nindent 4 }}
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - secrets
  verbs:
  - '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: monitoring-config-edit
  namespace: {{ template "kube-prometheus-stack.namespace" . }}
  labels: {{ include "kube-prometheus-stack.labels" . | nindent 4 }}
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - secrets
  verbs:
  - '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: monitoring-config-view
  namespace: {{ template "kube-prometheus-stack.namespace" . }}
  labels: {{ include "kube-prometheus-stack.labels" . | nindent 4 }}
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - secrets
  verbs:
  - 'get'
  - 'list'
  - 'watch'
{{- end }}