Fix: Updated deployment files with correct Prometheus URL and RBAC permissions

k8s/configmap.yaml

@@ -21,7 +21,7 @@ data:
   SYSTEM_NAMESPACE_PREFIXES: '["kube-", "openshift-", "knative-", "default", "kube-system", "kube-public", "kube-node-lease"]'
   
   # URL do Prometheus
-  PROMETHEUS_URL: "http://prometheus.openshift-monitoring.svc.cluster.local:9090"
+  PROMETHEUS_URL: "https://prometheus-k8s.openshift-monitoring.svc.cluster.local:9091"
   
   # Configurações de relatório
   REPORT_EXPORT_PATH: "/tmp/reports"

k8s/deployment.yaml

@@ -125,7 +125,14 @@ spec:
         volumeMounts:
         - name: reports
           mountPath: /tmp/reports
+        - name: service-account-token
+          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
+          readOnly: true
       volumes:
       - name: reports
         emptyDir: {}
+      - name: service-account-token
+        secret:
+          secretName: resource-governance-sa-token
+          optional: false
       restartPolicy: Always

k8s/rbac.yaml

@@ -60,33 +60,18 @@ subjects:
   name: resource-governance-sa
   namespace: resource-governance
 ---
-# Role para acessar recursos do Prometheus (se necessário)
+# ClusterRoleBinding para acessar o Prometheus
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRoleBinding
 metadata:
-  name: resource-governance-prometheus-role
-  namespace: resource-governance
-  labels:
-    app.kubernetes.io/name: resource-governance
-    app.kubernetes.io/component: governance
-rules:
-# Permissões para acessar serviços do Prometheus
-- apiGroups: [""]
-  resources: ["services", "endpoints"]
-  verbs: ["get", "list", "watch"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: resource-governance-prometheus-binding
-  namespace: resource-governance
+  name: resource-governance-monitoring
   labels:
     app.kubernetes.io/name: resource-governance
     app.kubernetes.io/component: governance
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: resource-governance-prometheus-role
+  kind: ClusterRole
+  name: cluster-monitoring-view
 subjects:
 - kind: ServiceAccount
   name: resource-governance-sa