From 1db862e770b38acab627fa23461bef5c4036777b Mon Sep 17 00:00:00 2001
From: Aleksandr Tcitlionok <803797+terghalin@users.noreply.github.com>
Date: Thu, 5 Dec 2024 06:56:23 +0000
Subject: [PATCH] update(k8s): add namespace metrics

---
 app/routes/export.py   |  2 +-
 examples/k8s/rbac.yaml | 22 ++++++++++++++++++++++
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/app/routes/export.py b/app/routes/export.py
index 30b19ad..ec42865 100644
--- a/app/routes/export.py
+++ b/app/routes/export.py
@@ -24,7 +24,7 @@ def export_data(format: str = "yaml"):
     data = {
         "metal_nodes": fetch_all("metal_nodes"),
         "virtual_machines": fetch_all("virtual_machines"),
-        "kubernetes": fetch_k8s_data(),
+        "kubernetes": fetch_k8s_data_with_usage(),
     }
 
     if format.lower() == "yaml":
diff --git a/examples/k8s/rbac.yaml b/examples/k8s/rbac.yaml
index 4954eb6..5de3201 100644
--- a/examples/k8s/rbac.yaml
+++ b/examples/k8s/rbac.yaml
@@ -25,3 +25,25 @@ roleRef:
   kind: ClusterRole
   name: metalcheck-clusterrole
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: metrics-reader
+rules:
+- apiGroups: ["metrics.k8s.io"]
+  resources: ["pods"]
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: metrics-reader-binding
+subjects:
+- kind: ServiceAccount
+  name: metalcheck-sa
+  namespace: metalcheck
+roleRef:
+  kind: ClusterRole
+  name: metrics-reader
+  apiGroup: rbac.authorization.k8s.io