From 1eca4fc3cc6a9714c16d7c0dd87f73b949d6fbd6 Mon Sep 17 00:00:00 2001
From: Ben Konicek <ben.konicek@gmail.com>
Date: Tue, 26 May 2026 10:16:58 -0400
Subject: [PATCH] add rbac for prometheus CRD

---
 environments/sandbox-oci/goldilocks/values.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/environments/sandbox-oci/goldilocks/values.yaml b/environments/sandbox-oci/goldilocks/values.yaml
index 8d11bf9..c78840e 100644
--- a/environments/sandbox-oci/goldilocks/values.yaml
+++ b/environments/sandbox-oci/goldilocks/values.yaml
@@ -11,6 +11,16 @@ controller:
   flags:
     on-by-default: true
     exclude-namespaces: kube-system,kube-public,kube-node-lease
+  rbac:
+    extraRules:
+      - apiGroups:
+        - "monitoring.coreos.com"
+        resources:
+        - "prometheuses"
+        verbs:
+        - "get"
+        - "list"
+        - "watch"
 
 dashboard:
   flags: