From fac52a1f1fbd974573bdc641a09b062bf1032000 Mon Sep 17 00:00:00 2001
From: Adam Saleh <asaleh@redhat.com>
Date: Wed, 17 Mar 2021 14:38:17 +0100
Subject: [PATCH] Changed the service name and added even more permissions.

---
 .../rbac/prometheus/prometheus-cluster-role.yaml    | 13 +++++++++++++
 roles/openshift-apps/bodhi/files/servicemonitor.yml |  4 ++--
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml b/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
index d63d59f023..2a0070ea47 100644
--- a/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
+++ b/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
@@ -3,6 +3,18 @@ kind: ClusterRole
 metadata:
   name: prometheus
 rules:
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
 - apiGroups: [""]
   resources:
   - nodes
@@ -13,6 +25,7 @@ rules:
 - apiGroups: [""]
   resources:
   - configmaps
+  - namespaces # Required to get through the alertmanager oauth proxy
   verbs: ["get"]
 - nonResourceURLs: ["*"]
   verbs: ["get"]
diff --git a/roles/openshift-apps/bodhi/files/servicemonitor.yml b/roles/openshift-apps/bodhi/files/servicemonitor.yml
index 74a8151e75..6720f5d456 100644
--- a/roles/openshift-apps/bodhi/files/servicemonitor.yml
+++ b/roles/openshift-apps/bodhi/files/servicemonitor.yml
@@ -3,11 +3,11 @@ kind: ServiceMonitor
 metadata:
   labels:
     monitoring-key: 'cpe'
-  name: bodhi-web
+  name: bodhi-service
 spec:
   endpoints:
     - path: /metrics
       port: web
   selector:
     matchLabels:
-      service: web
\ No newline at end of file
+      app: bodhi
\ No newline at end of file