From 68e031d2812199b8a378863fe5e4831a9d1a6fed Mon Sep 17 00:00:00 2001
From: Koen Dierckx <koen.dierckx@gmail.com>
Date: Tue, 28 Oct 2025 13:31:13 +0100
Subject: [PATCH] [kube-state-metrics] * added missing rolebindings to
 values.yaml * added rolebindings rule to role template

Signed-off-by: DIERCKXK <koen.dierckx@vito.be>
---
 charts/kube-state-metrics/templates/role.yaml | 6 ++++++
 charts/kube-state-metrics/values.yaml         | 1 +
 2 files changed, 7 insertions(+)

diff --git a/charts/kube-state-metrics/templates/role.yaml b/charts/kube-state-metrics/templates/role.yaml
index 4b6537b1b874..34caa1578960 100644
--- a/charts/kube-state-metrics/templates/role.yaml
+++ b/charts/kube-state-metrics/templates/role.yaml
@@ -129,6 +129,12 @@ rules:
   - roles
   verbs: ["list", "watch"]
 {{ end -}}
+{{ if has "rolebindings" $.Values.collectors }}
+- apiGroups: ["rbac.authorization.k8s.io"]
+  resources:
+    - rolebindings
+  verbs: ["list", "watch"]
+{{ end -}}
 {{ if has "nodes" $.Values.collectors }}
 - apiGroups: [""]
   resources:
diff --git a/charts/kube-state-metrics/values.yaml b/charts/kube-state-metrics/values.yaml
index 5feba38f7354..795c972e7557 100644
--- a/charts/kube-state-metrics/values.yaml
+++ b/charts/kube-state-metrics/values.yaml
@@ -435,6 +435,7 @@ collectors:
   # - clusterrolebindings
   # - clusterroles
   # - roles
+  # - rolebindings
 
 # Enabling kubeconfig will pass the --kubeconfig argument to the container
 kubeconfig: