Add RBAC for "coordination.k8s.io" used by MCM

23technologies · Feb 1, 2022 · ed1215f · ed1215f
1 parent 75bd629
commit ed1215f
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml b/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml
@@ -3,6 +3,13 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: extensions.gardener.cloud:{{ .Values.providerName }}:{{ .Release.Namespace }}:machine-controller-manager
+  ownerReferences:
+  - apiVersion: v1
+    kind: Namespace
+    name: {{ .Release.Namespace }}
+    uid: {{ .Values.namespace.uid }}
+    controller: true
+    blockOwnerDeletion: true
 rules:
 - apiGroups:
   - machine.sapcloud.io
@@ -19,3 +26,20 @@ rules:
   - events
   verbs:
   - "*"
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - create
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  resourceNames:
+  - machine-controller
+  - machine-controller-manager
+  verbs:
+  - get
+  - watch
+  - update