apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  annotations:
    meta.helm.sh/release-name: kube-prometheus-stack
    meta.helm.sh/release-namespace: monitoring
  creationTimestamp: "2026-03-12T10:02:42Z"
  labels:
    app.kubernetes.io/managed-by: Helm
  name: kube-prometheus-stack-pod-tls-sidecar
  namespace: monitoring
  resourceVersion: "3955"
  uid: c516c1ef-ec15-4783-bb57-72565f43f53f
rules:
- apiGroups:
  - cert-manager.io
  resources:
  - certificates
  verbs:
  - get
  - list
  - create
  - watch
- apiGroups:
  - ""
  resources:
  - secrets
  verbs:
  - get
  - list
  - patch
  - watch