Merge pull request #135 from projectsyn/fix/olm-permissions

Fix OLM permissions for L2 Announcements

Author: DebakelOrakel

component/olm.jsonnet

@@ -69,11 +69,13 @@ local metadata_name_map = {
     CiliumConfig: 'cilium',
     Deployment: 'cilium-olm',
     OlmRole: 'cilium-olm',
+    OlmClusterRole: 'cilium-cilium-olm',
   },
   enterprise: {
     CiliumConfig: 'cilium-enterprise',
     Deployment: 'cilium-ee-olm',
     OlmRole: 'cilium-ee-olm',
+    OlmClusterRole: 'cilium-cilium-ee-olm',
   },
 };
 
@@ -210,6 +212,19 @@ local patchManifests = function(file, has_csv)
         ],
       },
     }
+  else if (
+    file.contents.kind == 'ClusterRole' &&
+    file.contents.metadata.name == metadata_name_map[params.release].OlmClusterRole
+  ) then
+    file {
+      contents+: {
+        rules+: [ {
+          apiGroups: [ 'coordination.k8s.io' ],
+          resources: [ 'leases' ],
+          verbs: [ 'create', 'get', 'update', 'list', 'delete' ],
+        } ],
+      },
+    }
   else
     file;
 

tests/golden/olm-opensource/cilium/cilium/olm/cluster-network-06-cilium-00008-cilium-cilium-olm-clusterrole.yaml

@@ -33,3 +33,13 @@ rules:
     verbs:
       - patch
       - update
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - create
+      - get
+      - update
+      - list
+      - delete