Add ClusterRole for elector which Naiserator can create bindings to

nais · Dec 8, 2023 · 09d122c · 09d122c
1 parent 23c97b8
commit 09d122c
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/charts/elector/templates/cluster_role.yaml b/charts/elector/templates/cluster_role.yaml
@@ -0,0 +1,24 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "elector.fullname" . }}
+  labels:
+    {{- include "elector.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - create
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+  - watch