fix(leadership election): add rbac role for V1Lease objects

Author: Christoph Bühler

src/KubeOps/Operator/Commands/Generators/RbacGenerator.cs

@@ -38,6 +38,7 @@ public static V1ClusterRole GenerateManagerRbac()
                 new V1ObjectMeta { Name = "operator-role" },
                 new List<V1PolicyRule>(
                     GetAttributes<EntityRbacAttribute>(assembly)
+                        .Concat(GetAttributes<EntityRbacAttribute>(Assembly.GetExecutingAssembly()))
                         .SelectMany(a => a.CreateRbacPolicies())
                         .Concat(GetAttributes<GenericRbacAttribute>(assembly).Select(a => a.CreateRbacPolicy()))));
         }

src/KubeOps/Operator/Leadership/LeaderElector.cs

@@ -5,13 +5,15 @@
 using System.Threading.Tasks;
 using k8s.Models;
 using KubeOps.Operator.Client;
+using KubeOps.Operator.Rbac;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Rest;
 using Timer = System.Timers.Timer;
 
 namespace KubeOps.Operator.Leadership
 {
+    [EntityRbac(typeof(V1Lease), Verbs = RbacVerb.All)]
     internal class LeaderElector : IHostedService
     {
         private readonly ILogger<LeaderElector> _logger;

tests/KubeOps.Test/KubeOps.Test.csproj

@@ -19,4 +19,10 @@
         <ProjectReference Include="..\..\src\KubeOps\KubeOps.csproj" />
     </ItemGroup>
 
+    <ItemGroup>
+      <Folder Include="Operator\Leadership" />
+      <Folder Include="Operator\Queue" />
+      <Folder Include="Operator\Watcher" />
+    </ItemGroup>
+
 </Project>