[stable/kube-state-metrics] Fix STS role for Autosharding (#23210)

Currently, Get, List and Watch are required. List and Watch are provided by the ClusterRole related to collectors. The STS collector can be disabled breaking the current AutoSharding role permissions. Moreover, the resourceNames depends of the RELEASE_NAME as defined in deployment.yaml so we need to reflect this or we won't have the correct permission to read our STS. Signed-off-by: Mathis Raguin <[email protected]>
helm · Jul 17, 2020 · b9d0ed2 · b9d0ed2
1 parent e8cd9b7
commit b9d0ed2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/stable/kube-state-metrics/Chart.yaml b/stable/kube-state-metrics/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
 - monitoring
 - prometheus
 - kubernetes
-version: 2.8.11
+version: 2.8.12
 appVersion: 1.9.7
 home: https://github.com/kubernetes/kube-state-metrics/
 sources:

diff --git a/stable/kube-state-metrics/templates/stsdiscovery-role.yaml b/stable/kube-state-metrics/templates/stsdiscovery-role.yaml
@@ -19,9 +19,11 @@ rules:
 - apiGroups:
   - apps
   resourceNames:
-  - kube-state-metrics
+  - {{ template "kube-state-metrics.fullname" . }}
   resources:
   - statefulsets
   verbs:
   - get
+  - list
+  - watch
 {{- end }}