Allow ConfigMap writes for operator for leaderelection

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <[email protected]>
openfaas · Oct 17, 2023 · 0d729f5 · 0d729f5
1 parent dbc2aae
commit 0d729f5
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/chart/openfaas/templates/operator-rbac.yaml b/chart/openfaas/templates/operator-rbac.yaml
@@ -41,6 +41,11 @@ rules:
 - apiGroups: [""]
   resources: ["configmaps"]
   verbs: ["get",  "create"]
+{{- if .Values.operator.leaderElection.enabled }}
+- apiGroups: [""]
+  resources: ["configmaps"]
+  verbs: [ "update", "patch", "delete"]
+{{- end }}
 - apiGroups: ["apps", "extensions"]
   resources: ["deployments"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
@@ -153,6 +158,11 @@ rules:
   - apiGroups: [""]
     resources: ["configmaps"]
     verbs: ["get",  "create"]
+{{- if .Values.operator.leaderElection.enabled }}
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: [ "update", "patch", "delete"]
+{{- end }}
 # TODO: AE - remove endpoints from RBAC now that operator uses EndpointSlices
   - apiGroups: [""]
     resources: ["pods", "pods/log", "namespaces", "endpoints"]