diff --git a/manifests/0000_90_cluster-authentication-operator_01_prometheusrbac.yaml b/manifests/0000_90_cluster-authentication-operator_01_prometheusrbac.yaml index e29738b11..53dc365e3 100644 --- a/manifests/0000_90_cluster-authentication-operator_01_prometheusrbac.yaml +++ b/manifests/0000_90_cluster-authentication-operator_01_prometheusrbac.yaml @@ -19,6 +19,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch --- # Role for accessing metrics exposed by authentication resources apiVersion: rbac.authorization.k8s.io/v1 @@ -41,6 +49,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch --- # oauth-apiserver role apiVersion: rbac.authorization.k8s.io/v1 @@ -63,6 +79,14 @@ rules: - get - list - watch +- apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch --- # Grant cluster-monitoring access to cluster-authentication-operator metrics apiVersion: rbac.authorization.k8s.io/v1 diff --git a/manifests/0000_90_cluster-authentication-operator_02_servicemonitor.yaml b/manifests/0000_90_cluster-authentication-operator_02_servicemonitor.yaml index b594ecc39..e47d8ea38 100644 --- a/manifests/0000_90_cluster-authentication-operator_02_servicemonitor.yaml +++ b/manifests/0000_90_cluster-authentication-operator_02_servicemonitor.yaml @@ -29,6 +29,7 @@ spec: selector: matchLabels: app: authentication-operator + serviceDiscoveryRole: EndpointSlice --- # Configure cluster-monitoring for cluster authentication resources apiVersion: monitoring.coreos.com/v1 @@ -60,6 +61,7 @@ spec: selector: matchLabels: app: oauth-openshift + serviceDiscoveryRole: EndpointSlice --- apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor @@ -113,3 +115,4 @@ spec: selector: matchLabels: app: openshift-oauth-apiserver + serviceDiscoveryRole: EndpointSlice