From 732913382eb9478bc3e99afbe60d630689cee9d9 Mon Sep 17 00:00:00 2001
From: Maciej Borsz <maciejborsz@google.com>
Date: Wed, 3 Feb 2021 09:24:52 +0100
Subject: [PATCH] Allow checking pod resource usage

---
 infra/gcp/namespaces/namespace-user-role.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/infra/gcp/namespaces/namespace-user-role.yml b/infra/gcp/namespaces/namespace-user-role.yml
index a6f1b36ee6a..8ffe8f2a858 100644
--- a/infra/gcp/namespaces/namespace-user-role.yml
+++ b/infra/gcp/namespaces/namespace-user-role.yml
@@ -26,6 +26,9 @@ rules:
   - apiGroups: ["networking.k8s.io"]
     resources: ["networkpolicies"]
     verbs: ["*"]
+  - apiGroups: ["metrics.k8s.io"]
+    resources: ["pods"]
+    verbs: ["*"]
   - apiGroups: ["cert-manager.io"]
     resources: ["certificates"]
     verbs: ["*"]