---
# This is a generated file. DO NOT EDIT
# Run `make merge-cluster-roles` to generate.
# Sources: 
# 	manifests/cluster-monitoring-operator-role.yaml.in
# 	assets/alertmanager/cluster-role.yaml
# 	assets/cluster-monitoring-operator/cluster-role.yaml
# 	assets/grafana/cluster-role.yaml
# 	assets/kube-state-metrics/cluster-role.yaml
# 	assets/kube-state-metrics/role.yaml
# 	assets/node-exporter/cluster-role.yaml
# 	assets/prometheus-k8s/cluster-role.yaml
# 	assets/prometheus-k8s/role-config.yaml
# 	assets/prometheus-k8s/role-specific-namespaces.yaml
# 	assets/prometheus-operator/cluster-role.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata: {name: cluster-monitoring-operator}
rules:
- apiGroups: [rbac.authorization.k8s.io]
  resources: [clusterrolebindings, clusterroles, rolebindings, roles]
  verbs: [create, delete, get, list, update, watch]
- apiGroups: ['']
  resources: [configmaps, serviceaccounts]
  verbs: [create, delete, get, list, update, watch]
- apiGroups: [apps]
  resources: [daemonsets, deployments]
  verbs: [create, delete, get, list, update, watch]
- apiGroups: [route.openshift.io]
  resources: [routes]
  verbs: [create, delete, get, list, update, watch]
- apiGroups: [security.openshift.io]
  resources: [securitycontextconstraints]
  verbs: [create, delete, get, list, update, watch]
- apiGroups: [authentication.k8s.io]
  resources: [tokenreviews]
  verbs: [create]
- apiGroups: [authorization.k8s.io]
  resources: [subjectaccessreviews]
  verbs: [create]
- apiGroups: ['']
  resources: [namespaces]
  verbs: [get]
- apiGroups: [apps]
  resources: [daemonsets, deployments, replicasets, statefulsets]
  verbs: [list, watch]
- apiGroups: [extensions]
  resources: [daemonsets, deployments, replicasets]
  verbs: [list, watch]
- apiGroups: [autoscaling]
  resources: [horizontalpodautoscalers]
  verbs: [list, watch]
- apiGroups: [batch]
  resources: [cronjobs, jobs]
  verbs: [list, watch]
- apiGroups: ['']
  resources: [configmaps, endpoints, limitranges, namespaces, nodes, persistentvolumeclaims,
    persistentvolumes, pods, replicationcontrollers, resourcequotas, secrets, services]
  verbs: [list, watch]
- apiGroups: ['']
  resources: [pods]
  verbs: [get]
- apiGroups: [apps]
  resourceNames: [kube-state-metrics]
  resources: [deployments]
  verbs: [get, update]
- apiGroups: [extensions]
  resourceNames: [kube-state-metrics]
  resources: [deployments]
  verbs: [get, update]
- apiGroups: ['']
  resources: [nodes/metrics]
  verbs: [get]
- nonResourceURLs: [/metrics]
  verbs: [get]
- apiGroups: ['']
  resources: [configmaps]
  verbs: [get]
- apiGroups: ['']
  resources: [endpoints, nodes, pods, services]
  verbs: [get, list, watch]
- apiGroups: ['']
  resources: [namespaces]
  verbs: [list, watch]
- apiGroups: ['']
  resources: [nodes]
  verbs: [list, watch]
- apiGroups: [monitoring.coreos.com]
  resources: [alertmanagers, alertmanagers/finalizers, prometheuses, prometheuses/finalizers,
    prometheusrules, servicemonitors]
  verbs: ['*']
- apiGroups: ['']
  resources: [configmaps, secrets]
  verbs: ['*']
- apiGroups: [apps]
  resources: [statefulsets]
  verbs: ['*']
- apiGroups: ['']
  resources: [endpoints, services]
  verbs: [create, get, update]
- apiGroups: ['']
  resources: [pods]
  verbs: [delete, list]
- apiGroups: [apiextensions.k8s.io]
  resources: [customresourcedefinitions]
  verbs: ['*']

