From 812b48298a92a8bc605ffdbca7eba1a60cef57d5 Mon Sep 17 00:00:00 2001 From: Jian Qiu Date: Thu, 31 Mar 2022 00:16:22 +0800 Subject: [PATCH] Add lease permission for leader election (#229) Signed-off-by: Jian Qiu --- .../klusterlet/management/klusterlet-registration-role.yaml | 3 +++ manifests/klusterlet/management/klusterlet-work-role.yaml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/manifests/klusterlet/management/klusterlet-registration-role.yaml b/manifests/klusterlet/management/klusterlet-registration-role.yaml index 15a811636..937c9fc58 100644 --- a/manifests/klusterlet/management/klusterlet-registration-role.yaml +++ b/manifests/klusterlet/management/klusterlet-registration-role.yaml @@ -11,6 +11,9 @@ rules: - apiGroups: [""] resources: ["configmaps", "secrets"] verbs: ["get", "list", "watch", "create", "delete", "update", "patch"] +- apiGroups: ["coordination.k8s.io"] + resources: ["leases"] + verbs: ["create", "get", "list", "update", "watch", "patch"] - apiGroups: ["", "events.k8s.io"] resources: ["events"] verbs: ["create", "patch", "update"] diff --git a/manifests/klusterlet/management/klusterlet-work-role.yaml b/manifests/klusterlet/management/klusterlet-work-role.yaml index 5eb01f5b7..40bdfcf3f 100644 --- a/manifests/klusterlet/management/klusterlet-work-role.yaml +++ b/manifests/klusterlet/management/klusterlet-work-role.yaml @@ -9,6 +9,9 @@ rules: - apiGroups: [""] resources: ["configmaps"] verbs: ["get", "list", "watch", "create", "delete", "update", "patch"] +- apiGroups: ["coordination.k8s.io"] + resources: ["leases"] + verbs: ["create", "get", "list", "update", "watch", "patch"] - apiGroups: [""] resources: ["secrets"] verbs: ["get", "list", "watch"]