# Sets up ClusterRole with full access to all resources and nonResourceURLs
# This is just for demonstration purposes and should not be used in production
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ta
rules:
- apiGroups: [ '*' ]
  resources: [ '*' ]
  verbs: [ '*' ]
- nonResourceURLs: [ '*' ]
  verbs: [ '*' ]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: ta
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: ta
subjects:
  - kind: ServiceAccount
    name: ta-targetallocator
    namespace: default
---
# Sets up the TargetAllocator
apiVersion: opentelemetry.io/v1alpha1
kind: TargetAllocator
metadata:
  name: ta
  namespace: default
spec:
  # Sets up the ServiceMonitor for the TA
  observability:
    metrics:
      enableMetrics: true
  # Set up watching of ServiceMonitors
  prometheusCR:
    enabled: true
    serviceMonitorSelector: {}