From 3fd40ffb0ef220524eaef941eb3842d1968dc715 Mon Sep 17 00:00:00 2001
From: Damien Grisonnet <dgrisonn@redhat.com>
Date: Mon, 17 Jul 2023 22:01:30 +0200
Subject: [PATCH] addons/metrics-server: fix nanny rbac permissions

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
---
 cluster/addons/metrics-server/resource-reader.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/cluster/addons/metrics-server/resource-reader.yaml b/cluster/addons/metrics-server/resource-reader.yaml
index a3788cb52f1..16592f14720 100644
--- a/cluster/addons/metrics-server/resource-reader.yaml
+++ b/cluster/addons/metrics-server/resource-reader.yaml
@@ -19,6 +19,18 @@ rules:
       - get
       - list
       - watch
+  - apiGroups: ["apps"]
+    resources:
+      - deployments
+    resourceNames:
+      - metrics-server-v0.6.3
+    verbs:
+      - get
+      - patch
+  - nonResourceURLs:
+    - /metrics
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding