Fix ServiceMonitor RBAC for authenticated metrics endpoints

Add /metrics nonResourceURL permission to allow Prometheus
to access authenticated metrics without HTTP 500 errors.

Author: anik120

manifests/0000_90_olm_00-service-monitor.yaml

@@ -19,6 +19,10 @@ rules:
       - get
       - list
       - watch
+  - nonResourceURLs:
+      - "/metrics"
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

microshift-manifests/0000_90_olm_00-service-monitor.yaml

@@ -19,6 +19,10 @@ rules:
       - get
       - list
       - watch
+  - nonResourceURLs:
+      - "/metrics"
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

staging/operator-lifecycle-manager/deploy/chart/templates/0000_90_olm_00-service-monitor.yaml

@@ -87,4 +87,8 @@ rules:
   - get
   - list
   - watch
+- nonResourceURLs:
+  - "/metrics"
+  verbs:
+  - get
 {{ end }}