Add support for prometheus

[ric-plt/ric-dep.git] / helm / infrastructure / subcharts / prometheus / templates / alertmanager-clusterrole.yaml

diff --git a/helm/infrastructure/subcharts/prometheus/templates/alertmanager-clusterrole.yaml b/helm/infrastructure/subcharts/prometheus/templates/alertmanager-clusterrole.yaml
new file mode 100644 (file)
index 0000000..3cfc133
--- /dev/null
+++ b/helm/infrastructure/subcharts/prometheus/templates/alertmanager-clusterrole.yaml
@@ -0,0 +1,21 @@
+{{- if and .Values.alertmanager.enabled .Values.rbac.create -}}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  labels:
+    {{- include "prometheus.alertmanager.labels" . | nindent 4 }}
+  name: {{ template "prometheus.alertmanager.fullname" . }}
+rules:
+{{- if .Values.podSecurityPolicy.enabled }}
+  - apiGroups:
+    - extensions
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use
+    resourceNames:
+    - {{ template "prometheus.alertmanager.fullname" . }}
+{{- else }}
+  []
+{{- end }}
+{{- end }}