Give platform prometheus permission to scrape tekton-kueue (#7564)

Signed-off-by: Gal Ben Haim <[email protected]>

Author: gbenhaim

components/kueue/development/tekton-kueue-monitoring/monitoring.yaml

@@ -76,3 +76,32 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: tekton-kueue-webhook
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-metrics-read
+rules:
+  - verbs:
+      - get
+      - list
+      - watch
+    apiGroups:
+      - ''
+    resources:
+      - services
+      - endpoints
+      - pods
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-prometheus-k8s-read-binding
+subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: openshift-monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tekton-kueue-metrics-read

components/kueue/production/base/tekton-kueue-monitoring/monitoring.yaml

@@ -76,3 +76,32 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: tekton-kueue-webhook
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-metrics-read
+rules:
+  - verbs:
+      - get
+      - list
+      - watch
+    apiGroups:
+      - ''
+    resources:
+      - services
+      - endpoints
+      - pods
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-prometheus-k8s-read-binding
+subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: openshift-monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tekton-kueue-metrics-read

components/kueue/staging/base/tekton-kueue-monitoring/monitoring.yaml

@@ -76,3 +76,32 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: tekton-kueue-webhook
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-metrics-read
+rules:
+  - verbs:
+      - get
+      - list
+      - watch
+    apiGroups:
+      - ''
+    resources:
+      - services
+      - endpoints
+      - pods
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: tekton-kueue-prometheus-k8s-read-binding
+subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: openshift-monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tekton-kueue-metrics-read