Merge pull request #265 from dciangot/namespace_role

fix all service account roles with namespaces and leases
interTwin-eu · Jul 18, 2024 · a7175b9 · a7175b9
2 parents 331b713 + 26dfb7d
commit a7175b9
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 0 deletions.
diff --git a/ci/manifests/service-account.yaml b/ci/manifests/service-account.yaml
@@ -28,6 +28,7 @@ rules:
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list

diff --git a/example/interlink-docker/vk/service-account.yaml b/example/interlink-docker/vk/service-account.yaml
@@ -10,13 +10,25 @@ metadata:
   name: interlink-role
   namespace: vk
 rules:
+- apiGroups:
+  - "coordination.k8s.io"
+  resources:
+  - leases
+  verbs:
+  - update
+  - create
+  - get
+  - list
+  - watch
+  - patch
 - apiGroups:
   - ""
   resources:
   - configmaps
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list

diff --git a/helm/interlink/templates/service-account.yaml b/helm/interlink/templates/service-account.yaml
@@ -10,13 +10,25 @@ metadata:
   name: "{{ .Values.nodeName }}-role"
   namespace: {{ .Release.Namespace }}
 rules:
+- apiGroups:
+  - "coordination.k8s.io"
+  resources:
+  - leases
+  verbs:
+  - update
+  - create
+  - get
+  - list
+  - watch
+  - patch
 - apiGroups:
   - ""
   resources:
   - configmaps
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list