Enable leader election in the operator

The operator no longer runs leader-for-life election so enable leader-with-lease via the CLI arg in the pod spec. Signed-off-by: Tom Pantelis <[email protected]>
submariner-io · Dec 13, 2024 · 0e2e31a · 0e2e31a
1 parent c0e1ee4
commit 0e2e31a
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 2 deletions.
diff --git a/submariner-operator/templates/operator-deployment.yaml b/submariner-operator/templates/operator-deployment.yaml
@@ -27,8 +27,8 @@ spec:
         name: {{ template "submariner.fullname" . }}
     spec:
       containers:
-      - command:
-        - submariner-operator
+      - args:
+        - --leader-elect
         env:
         - name: WATCH_NAMESPACE
           valueFrom:

diff --git a/submariner-operator/templates/rbac.yaml b/submariner-operator/templates/rbac.yaml
@@ -87,6 +87,17 @@ rules:
       - servicediscoveries/finalizers
     verbs:
       - update
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - delete
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1