In order to be authorised to scrape the in-cluster prometheus (from COO or CMO), the prometheusAgent serviceAccount must assume the cluster-monitoring-view role and provide the serviceAccount accessToken as bearer in the request.
This token is automatically mounted in the container as a volume.
However, the scrapeClass currently does not support injecting tokens from the file system. See impacts
This feature has been requested by spasquie@redhat.com in this issue.

The purpose of this task is to:

• implement the field if needed and then test it in our setup so that we can deprecate the envoy sidecar.
• check wether the scrapeClass attribute from the prometheusAgent CR is well supported. Which was not obvious in my tests. I remember not finding the scrape class defined in the CR, in the resulting container.