Add lease RBAC permissions for globalnet

The globalnet controller will utilize leader election and thus needs permissions for lease resources. Signed-off-by: Tom Pantelis <[email protected]>
submariner-io · Oct 6, 2023 · d5bc46c · d5bc46c
1 parent 3d04a91
commit d5bc46c
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/config/rbac/submariner-globalnet/role.yaml b/config/rbac/submariner-globalnet/role.yaml
@@ -60,3 +60,14 @@ rules:
       - '*'
     verbs:
       - '*'
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - delete
diff --git a/pkg/embeddedyamls/yamls.go b/pkg/embeddedyamls/yamls.go
@@ -3165,6 +3165,17 @@ rules:
       - '*'
     verbs:
       - '*'
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - delete
 `
 	Config_rbac_submariner_globalnet_role_binding_yaml = `---
 kind: RoleBinding