how to allow non cluster-admins access to metrics

[Der-Sysop]

I'm trying (and failing) to allow access to metrics, e.g.
kubectl top nodes
kubectl top pods
to users that are not cluster admins.
I tried

• apiGroups: ["metrics.k8s.io"]
  resources: [""]
  verbs: ["get", "list"]

Am i doing something wrong?
I found nothing in docs or faq about how to do that ..

Thanks.

[dgrisonnet]

/assign

[theadzik]

@Der-Sysop I think you are looking for:

rules:
- apiGroups:
  - metrics.k8s.io
  resources:
  - pods
  - nodes
  verbs:
  - get
  - list
  - watch