include CRB

Signed-off-by: greg pereira <grpereir@redhat.com>

Author: Gregory-Pereira

config/openshift/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
 - ../default
 - cluster-monitoring-view-binding.yaml
 - metrics-reader-token.yaml
+- prometheus-metrics-auth-binding.yaml
 
 patches:
 - path: configmap-patch.yaml

config/openshift/prometheus-metrics-auth-binding.yaml

@@ -0,0 +1,14 @@
+# Grant the OpenShift user-workload-monitoring Prometheus SA permission to
+# authenticate to the WVA metrics endpoint (tokenreviews + subjectaccessreviews).
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: workload-variant-autoscaler-ocp-prometheus-metrics-auth
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: workload-variant-autoscaler-metrics-auth-role
+subjects:
+- kind: ServiceAccount
+  name: prometheus-k8s
+  namespace: openshift-user-workload-monitoring