apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: orchestra-metrics-reader
  namespace: orchestra-system
rules:
- nonResourceURLs:
  - "/metrics"
  verbs:
  - get
