fix(leadership election): add rbac role for V1Lease objects

buehler · Sep 10, 2020 · 16e7bbd · 16e7bbd
1 parent 931a49c
commit 16e7bbd
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/src/KubeOps/Operator/Commands/Generators/RbacGenerator.cs b/src/KubeOps/Operator/Commands/Generators/RbacGenerator.cs
@@ -38,6 +38,7 @@ public static V1ClusterRole GenerateManagerRbac()
                 new V1ObjectMeta { Name = "operator-role" },
                 new List<V1PolicyRule>(
                     GetAttributes<EntityRbacAttribute>(assembly)
+                        .Concat(GetAttributes<EntityRbacAttribute>(Assembly.GetExecutingAssembly()))
                         .SelectMany(a => a.CreateRbacPolicies())
                         .Concat(GetAttributes<GenericRbacAttribute>(assembly).Select(a => a.CreateRbacPolicy()))));
         }

diff --git a/src/KubeOps/Operator/Leadership/LeaderElector.cs b/src/KubeOps/Operator/Leadership/LeaderElector.cs
@@ -5,13 +5,15 @@
 using System.Threading.Tasks;
 using k8s.Models;
 using KubeOps.Operator.Client;
+using KubeOps.Operator.Rbac;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Rest;
 using Timer = System.Timers.Timer;
 
 namespace KubeOps.Operator.Leadership
 {
+    [EntityRbac(typeof(V1Lease), Verbs = RbacVerb.All)]
     internal class LeaderElector : IHostedService
     {
         private readonly ILogger<LeaderElector> _logger;

diff --git a/tests/KubeOps.Test/KubeOps.Test.csproj b/tests/KubeOps.Test/KubeOps.Test.csproj
@@ -19,4 +19,10 @@
         <ProjectReference Include="..\..\src\KubeOps\KubeOps.csproj" />
     </ItemGroup>
 
+    <ItemGroup>
+      <Folder Include="Operator\Leadership" />
+      <Folder Include="Operator\Queue" />
+      <Folder Include="Operator\Watcher" />
+    </ItemGroup>
+
 </Project>