From 26dfb7da530db63fda1efa33db4bb6e326b23d2e Mon Sep 17 00:00:00 2001
From: Diego Ciangottini <diego.ciangottini@pg.infn.it>
Date: Thu, 18 Jul 2024 21:39:08 +0200
Subject: [PATCH] fix all service account role with namespaces and leases

Signed-off-by: Diego Ciangottini <diego.ciangottini@pg.infn.it>
---
 ci/manifests/service-account.yaml                |  1 +
 example/interlink-docker/vk/service-account.yaml | 12 ++++++++++++
 helm/interlink/templates/service-account.yaml    | 12 ++++++++++++
 3 files changed, 25 insertions(+)

diff --git a/ci/manifests/service-account.yaml b/ci/manifests/service-account.yaml
index 8a0b3542..2169e592 100644
--- a/ci/manifests/service-account.yaml
+++ b/ci/manifests/service-account.yaml
@@ -28,6 +28,7 @@ rules:
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list
diff --git a/example/interlink-docker/vk/service-account.yaml b/example/interlink-docker/vk/service-account.yaml
index b9cfb2f0..3dbaa7f2 100644
--- a/example/interlink-docker/vk/service-account.yaml
+++ b/example/interlink-docker/vk/service-account.yaml
@@ -10,6 +10,17 @@ metadata:
   name: interlink-role
   namespace: vk
 rules:
+- apiGroups:
+  - "coordination.k8s.io"
+  resources:
+  - leases
+  verbs:
+  - update
+  - create
+  - get
+  - list
+  - watch
+  - patch
 - apiGroups:
   - ""
   resources:
@@ -17,6 +28,7 @@ rules:
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list
diff --git a/helm/interlink/templates/service-account.yaml b/helm/interlink/templates/service-account.yaml
index 54111570..b622e723 100644
--- a/helm/interlink/templates/service-account.yaml
+++ b/helm/interlink/templates/service-account.yaml
@@ -10,6 +10,17 @@ metadata:
   name: "{{ .Values.nodeName }}-role"
   namespace: {{ .Release.Namespace }}
 rules:
+- apiGroups:
+  - "coordination.k8s.io"
+  resources:
+  - leases
+  verbs:
+  - update
+  - create
+  - get
+  - list
+  - watch
+  - patch
 - apiGroups:
   - ""
   resources:
@@ -17,6 +28,7 @@ rules:
   - secrets
   - services
   - serviceaccounts
+  - namespaces
   verbs:
   - get
   - list