add rbac for k8s v1.17 (#1426)

pingcap · Dec 27, 2019 · 8e27679 · 8e27679
1 parent 9d0b4a9
commit 8e27679
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/charts/tidb-operator/templates/scheduler-rbac.yaml b/charts/tidb-operator/templates/scheduler-rbac.yaml
@@ -42,6 +42,13 @@ rules:
 - apiGroups: [""]
   resources: ["endpoints"]
   verbs: ["delete", "get", "patch", "update"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  verbs: ["create"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  resourceNames: ["{{ .Values.scheduler.schedulerName }}"]
+  verbs: ["get", "update"]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
@@ -95,6 +102,13 @@ rules:
 - apiGroups: [""]
   resources: ["endpoints"]
   verbs: ["delete", "get", "patch", "update"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  verbs: ["create"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  resourceNames: ["{{ .Values.scheduler.schedulerName }}"]
+  verbs: ["get", "update"]
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1