apiVersion: v1 kind: Namespace metadata: name: monitoring --- apiVersion: v1 kind: ServiceAccount metadata: name: kube-state-metrics namespace: monitoring --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kube-state-metrics rules: - apiGroups: [""] resources: ["configmaps","secrets","nodes","pods","services","resourcequotas","replicationcontrollers","limitranges","persistentvolumeclaims","persistentvolumes","namespaces","endpoints"] verbs: ["list","watch"] - apiGroups: ["apps"] resources: ["statefulsets","daemonsets","deployments","replicasets"] verbs: ["list","watch"] - apiGroups: ["batch"] resources: ["cronjobs","jobs"] verbs: ["list","watch"] - apiGroups: ["autoscaling"] resources: ["horizontalpodautoscalers"] verbs: ["list","watch"] - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["list","watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: kube-state-metrics roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: kube-state-metrics subjects: - kind: ServiceAccount name: kube-state-metrics namespace: monitoring --- apiVersion: apps/v1 kind: Deployment metadata: name: kube-state-metrics namespace: monitoring spec: replicas: 1 selector: matchLabels: app: kube-state-metrics template: metadata: labels: app: kube-state-metrics spec: serviceAccountName: kube-state-metrics containers: - name: kube-state-metrics image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0 ports: - containerPort: 8080 name: metrics resources: limits: cpu: 100m memory: 128Mi requests: cpu: 20m memory: 32Mi --- apiVersion: v1 kind: Service metadata: name: kube-state-metrics namespace: monitoring spec: type: NodePort selector: app: kube-state-metrics ports: - port: 8080 targetPort: 8080 nodePort: 30900