huanggze
kubectl get clusterrole kube-state-metrics -oyaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{“apiVersion”:“rbac.authorization.k8s.io/v1”,“kind”:“ClusterRole”,“metadata”:{“annotations”:{},“name”:“kube-state-metrics”},“rules”:[{“apiGroups”:[""],“resources”:[“configmaps”,“secrets”,“nodes”,“pods”,“services”,“resourcequotas”,“replicationcontrollers”,“limitranges”,“persistentvolumeclaims”,“persistentvolumes”,“namespaces”,“endpoints”],“verbs”:[“list”,“watch”]},{“apiGroups”:[“extensions”],“resources”:[“daemonsets”,“deployments”,“replicasets”,“ingresses”],“verbs”:[“list”,“watch”]},{“apiGroups”:[“apps”],“resources”:[“statefulsets”,“daemonsets”,“deployments”,“replicasets”],“verbs”:[“list”,“watch”]},{“apiGroups”:[“batch”],“resources”:[“cronjobs”,“jobs”],“verbs”:[“list”,“watch”]},{“apiGroups”:[“autoscaling”],“resources”:[“horizontalpodautoscalers”],“verbs”:[“list”,“watch”]},{“apiGroups”:[“authentication.k8s.io”],“resources”:[“tokenreviews”],“verbs”:[“create”]},{“apiGroups”:[“authorization.k8s.io”],“resources”:[“subjectaccessreviews”],“verbs”:[“create”]},{“apiGroups”:[“policy”],“resources”:[“poddisruptionbudgets”],“verbs”:[“list”,“watch”]}]}
creationTimestamp: “2020-02-23T03:19:10Z”
name: kube-state-metrics
resourceVersion: “4749″
selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/kube-state-metrics
uid: cd832a7b-2c7a-4420-a64a-2e5bc14ba73a
rules:
- apiGroups:
- ""
resources:
- configmaps
- secrets
- nodes
- pods
- services
- resourcequotas
- replicationcontrollers
- limitranges
- persistentvolumeclaims
- persistentvolumes
- namespaces
- endpoints
verbs:
- list
- watch
- apiGroups:
- extensions
resources:
- daemonsets
- deployments
- replicasets
- ingresses
verbs:
- list
- watch
- apiGroups:
- apps
resources:
- statefulsets
- daemonsets
- deployments
- replicasets
verbs:
- list
- watch
- apiGroups:
- batch
resources:
- cronjobs
- jobs
verbs:
- list
- watch
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- list
- watch
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- list
- watch
