From b59561c40240d2a52048923b1b94ed7385cab957 Mon Sep 17 00:00:00 2001
From: paulfantom <pawel@krupa.net.pl>
Date: Tue, 13 Aug 2019 10:08:52 +0200
Subject: [PATCH] install: add role bindings for prometheus service account

---
 ...uster-version-operator_00_prometheusrole.yaml | 16 ++++++++++++++++
 ...ersion-operator_01_prometheusrolebinding.yaml | 13 +++++++++++++
 ...ster-version-operator_02_servicemonitor.yaml} |  0
 pkg/payload/render.go                            |  4 +++-
 4 files changed, 32 insertions(+), 1 deletion(-)
 create mode 100644 install/0000_90_cluster-version-operator_00_prometheusrole.yaml
 create mode 100644 install/0000_90_cluster-version-operator_01_prometheusrolebinding.yaml
 rename install/{0000_90_cluster-version-operator_00_servicemonitor.yaml => 0000_90_cluster-version-operator_02_servicemonitor.yaml} (100%)

diff --git a/install/0000_90_cluster-version-operator_00_prometheusrole.yaml b/install/0000_90_cluster-version-operator_00_prometheusrole.yaml
new file mode 100644
index 0000000000..f05e229233
--- /dev/null
+++ b/install/0000_90_cluster-version-operator_00_prometheusrole.yaml
@@ -0,0 +1,16 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: prometheus-k8s
+  namespace: openshift-cluster-version
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - services
+  - endpoints
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/install/0000_90_cluster-version-operator_01_prometheusrolebinding.yaml b/install/0000_90_cluster-version-operator_01_prometheusrolebinding.yaml
new file mode 100644
index 0000000000..f26ff55191
--- /dev/null
+++ b/install/0000_90_cluster-version-operator_01_prometheusrolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: prometheus-k8s
+  namespace: openshift-cluster-version
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: prometheus-k8s
+subjects:
+- kind: ServiceAccount
+  name: prometheus-k8s
+  namespace: openshift-monitoring
diff --git a/install/0000_90_cluster-version-operator_00_servicemonitor.yaml b/install/0000_90_cluster-version-operator_02_servicemonitor.yaml
similarity index 100%
rename from install/0000_90_cluster-version-operator_00_servicemonitor.yaml
rename to install/0000_90_cluster-version-operator_02_servicemonitor.yaml
diff --git a/pkg/payload/render.go b/pkg/payload/render.go
index a709f76387..54f3362642 100644
--- a/pkg/payload/render.go
+++ b/pkg/payload/render.go
@@ -34,7 +34,9 @@ func Render(outputDir, releaseImage string) error {
 		odir: oManifestsDir,
 		skipFiles: sets.NewString(
 			"image-references",
-			"0000_90_cluster-version-operator_00_servicemonitor.yaml",
+			"0000_90_cluster-version-operator_00_prometheusrole.yaml",
+			"0000_90_cluster-version-operator_01_prometheusrolebinding.yaml",
+			"0000_90_cluster-version-operator_02_servicemonitor.yaml",
 		),
 	}, {
 		idir:      bootstrapDir,