From 2fc27082678f118587c126902622817a67451f0a Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Mon, 9 Feb 2026 11:24:14 +0100
Subject: [PATCH] chore: add permissions on endpointslice to Prometheus Role
 and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

---
 .../0000_90_service-ca-operator_01_prometheusrole.yaml    | 8 ++++++++
 .../0000_90_service-ca-operator_03_servicemonitor.yaml    | 1 +
 2 files changed, 9 insertions(+)

diff --git a/manifests/0000_90_service-ca-operator_01_prometheusrole.yaml b/manifests/0000_90_service-ca-operator_01_prometheusrole.yaml
index 7be422ece..75abdd716 100644
--- a/manifests/0000_90_service-ca-operator_01_prometheusrole.yaml
+++ b/manifests/0000_90_service-ca-operator_01_prometheusrole.yaml
@@ -19,3 +19,11 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - discovery.k8s.io
+  resources:
+  - endpointslices
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/manifests/0000_90_service-ca-operator_03_servicemonitor.yaml b/manifests/0000_90_service-ca-operator_03_servicemonitor.yaml
index 04479c953..68638748d 100644
--- a/manifests/0000_90_service-ca-operator_03_servicemonitor.yaml
+++ b/manifests/0000_90_service-ca-operator_03_servicemonitor.yaml
@@ -26,3 +26,4 @@ spec:
   selector:
     matchLabels:
       app: service-ca-operator
+  serviceDiscoveryRole: EndpointSlice