This commit adds leases.coordination.k8s.io to the leader-election-role

Role under the same rule as configmaps. These permissions are required by default by controller-runtime's leader election, which uses configmapsleases as the default election type. go/v3-alpha: add leases.coordination.k8s.io to leader election RBAC
kubernetes-sigs · Nov 10, 2020 · f6d54b9 · f6d54b9
1 parent 7db6812
commit f6d54b9
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 0 deletions.
diff --git a/pkg/plugin/v3/scaffolds/internal/templates/config/rbac/leader_election_role.go b/pkg/plugin/v3/scaffolds/internal/templates/config/rbac/leader_election_role.go
@@ -48,8 +48,10 @@ metadata:
 rules:
 - apiGroups:
   - ""
+  - coordination.k8s.io
   resources:
   - configmaps
+  - leases
   verbs:
   - get
   - list

diff --git a/testdata/project-v3-addon/config/rbac/leader_election_role.yaml b/testdata/project-v3-addon/config/rbac/leader_election_role.yaml
@@ -6,8 +6,10 @@ metadata:
 rules:
 - apiGroups:
   - ""
+  - coordination.k8s.io
   resources:
   - configmaps
+  - leases
   verbs:
   - get
   - list

diff --git a/testdata/project-v3-multigroup/config/rbac/leader_election_role.yaml b/testdata/project-v3-multigroup/config/rbac/leader_election_role.yaml
@@ -6,8 +6,10 @@ metadata:
 rules:
 - apiGroups:
   - ""
+  - coordination.k8s.io
   resources:
   - configmaps
+  - leases
   verbs:
   - get
   - list

diff --git a/testdata/project-v3/config/rbac/leader_election_role.yaml b/testdata/project-v3/config/rbac/leader_election_role.yaml
@@ -6,8 +6,10 @@ metadata:
 rules:
 - apiGroups:
   - ""
+  - coordination.k8s.io
   resources:
   - configmaps
+  - leases
   verbs:
   - get
   - list