apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  annotations:
    meta.helm.sh/release-name: kube-prometheus-stack
    meta.helm.sh/release-namespace: monitoring
  creationTimestamp: "2026-09-18T02:31:00Z"
  labels:
    app.kubernetes.io/managed-by: Helm
  name: kube-prometheus-stack-pod-tls-sidecar
  namespace: monitoring
  resourceVersion: "4393"
  uid: 34748b85-a2a4-4ab9-a001-52a35577a1df
rules:
- apiGroups:
  - cert-manager.io
  resources:
  - certificates
  verbs:
  - get
  - list
  - create
  - watch
- apiGroups:
  - ""
  resources:
  - secrets
  verbs:
  - get
  - list
  - patch
  - watch