grant leader election permissions

bakito · Feb 2, 2022 · c7186b7 · c7186b7
1 parent 716e0aa
commit c7186b7
Showing 1 changed file with 33 additions and 19 deletions.
diff --git a/helm/templates/rbac/role.yaml b/helm/templates/rbac/role.yaml
@@ -6,18 +6,6 @@ metadata:
   labels:
 {{ include "k8s-event-logger-operator.labels" . | nindent 4 }}
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - configmaps
-    verbs:
-      - get
-      - list
-      - watch
-      - create
-      - update
-      - patch
-      - delete
   - apiGroups:
       - ""
     resources:
@@ -26,13 +14,6 @@ rules:
       - get
       - update
       - patch
-  - apiGroups:
-      - ""
-    resources:
-      - events
-    verbs:
-      - create
-      - patch
   - apiGroups:
       - apps
     resources:
@@ -67,4 +48,37 @@ rules:
       - '*'
     verbs:
       - '*'
+  # start leader election
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - patch
+# end leader election
 {{- end -}}