config/rbac/auth_proxy_client_clusterrole.yaml (7 lines of code) (raw):

apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: metrics-reader rules: - nonResourceURLs: ["/metrics"] verbs: ["get"]