Add RBAC permissions for coordination.k8s.io/leases

Signed-off-by: Emruz Hossain <emruz@appscode.com>

Author: Emruz Hossain

pkg/rbac/init_container.go

@@ -24,6 +24,7 @@ import (
 	api "stash.appscode.dev/apimachinery/apis/stash/v1alpha1"
 	api_v1beta1 "stash.appscode.dev/apimachinery/apis/stash/v1beta1"
 
+	coordination "k8s.io/api/coordination/v1"
 	core "k8s.io/api/core/v1"
 	rbac "k8s.io/api/rbac/v1"
 	kerr "k8s.io/apimachinery/pkg/api/errors"
@@ -89,6 +90,11 @@ func (opt *RBACOptions) ensureRestoreInitContainerClusterRole() error {
 				Resources: []string{"secrets", "endpoints", "pods"},
 				Verbs:     []string{"get"},
 			},
+			{
+				APIGroups: []string{coordination.GroupName},
+				Resources: []string{"leases"},
+				Verbs:     []string{"*"},
+			},
 		}
 		return in
 	}, metav1.PatchOptions{})

pkg/rbac/sidecar.go

@@ -25,6 +25,7 @@ import (
 	api_v1beta1 "stash.appscode.dev/apimachinery/apis/stash/v1beta1"
 
 	apps "k8s.io/api/apps/v1"
+	coordination "k8s.io/api/coordination/v1"
 	core "k8s.io/api/core/v1"
 	rbac "k8s.io/api/rbac/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -121,6 +122,11 @@ func (opt *RBACOptions) ensureSidecarClusterRole() error {
 				Resources: []string{"serviceaccounts"},
 				Verbs:     []string{"get", "create"},
 			},
+			{
+				APIGroups: []string{coordination.GroupName},
+				Resources: []string{"leases"},
+				Verbs:     []string{"*"},
+			},
 		}
 		return in
 	}, metav1.PatchOptions{})