diff --git a/ci/manifests/service-account.yaml b/ci/manifests/service-account.yaml index 8a0b3542..2169e592 100644 --- a/ci/manifests/service-account.yaml +++ b/ci/manifests/service-account.yaml @@ -28,6 +28,7 @@ rules: - secrets - services - serviceaccounts + - namespaces verbs: - get - list diff --git a/example/interlink-docker/vk/service-account.yaml b/example/interlink-docker/vk/service-account.yaml index b9cfb2f0..3dbaa7f2 100644 --- a/example/interlink-docker/vk/service-account.yaml +++ b/example/interlink-docker/vk/service-account.yaml @@ -10,6 +10,17 @@ metadata: name: interlink-role namespace: vk rules: +- apiGroups: + - "coordination.k8s.io" + resources: + - leases + verbs: + - update + - create + - get + - list + - watch + - patch - apiGroups: - "" resources: @@ -17,6 +28,7 @@ rules: - secrets - services - serviceaccounts + - namespaces verbs: - get - list diff --git a/helm/interlink/templates/service-account.yaml b/helm/interlink/templates/service-account.yaml index 54111570..b622e723 100644 --- a/helm/interlink/templates/service-account.yaml +++ b/helm/interlink/templates/service-account.yaml @@ -10,6 +10,17 @@ metadata: name: "{{ .Values.nodeName }}-role" namespace: {{ .Release.Namespace }} rules: +- apiGroups: + - "coordination.k8s.io" + resources: + - leases + verbs: + - update + - create + - get + - list + - watch + - patch - apiGroups: - "" resources: @@ -17,6 +28,7 @@ rules: - secrets - services - serviceaccounts + - namespaces verbs: - get - list