Add monitoring RBAC and service account for dashboards

k8s/app.yaml

@@ -70,6 +70,34 @@ data:
       }
     }
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: lomavuokraus-monitor
+  namespace: ${K8S_NAMESPACE}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: lomavuokraus-monitor
+rules:
+  - apiGroups: [""]
+    resources: ["nodes", "pods", "pods/status"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: lomavuokraus-monitor-${K8S_NAMESPACE}
+subjects:
+  - kind: ServiceAccount
+    name: lomavuokraus-monitor
+    namespace: ${K8S_NAMESPACE}
+roleRef:
+  kind: ClusterRole
+  name: lomavuokraus-monitor
+  apiGroup: rbac.authorization.k8s.io
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -87,6 +115,7 @@ spec:
       labels:
         app: lomavuokraus-web
     spec:
+      serviceAccountName: lomavuokraus-monitor
       imagePullSecrets:
         - name: registry-halla
       containers: