From b86f38a9cb6cc1a135c96d4cba30c956c00ef217 Mon Sep 17 00:00:00 2001
From: gambtho <Thomas.Gamble@microsoft.com>
Date: Tue, 29 Aug 2023 16:07:23 -0400
Subject: [PATCH] include get/lease permission

---
 pkg/manifests/fixtures/nginx/full.json                       | 1 +
 pkg/manifests/fixtures/nginx/internal.json                   | 1 +
 pkg/manifests/fixtures/nginx/kube-system.json                | 1 +
 pkg/manifests/fixtures/nginx/no-ownership.json               | 1 +
 pkg/manifests/fixtures/nginx/optional-features-disabled.json | 1 +
 pkg/manifests/nginx.go                                       | 2 +-
 6 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/pkg/manifests/fixtures/nginx/full.json b/pkg/manifests/fixtures/nginx/full.json
index d78dfdae..98a9a077 100644
--- a/pkg/manifests/fixtures/nginx/full.json
+++ b/pkg/manifests/fixtures/nginx/full.json
@@ -82,6 +82,7 @@
         },
         {
           "verbs": [
+            "get",
             "list",
             "watch"
           ],
diff --git a/pkg/manifests/fixtures/nginx/internal.json b/pkg/manifests/fixtures/nginx/internal.json
index f509b953..0dea29ed 100644
--- a/pkg/manifests/fixtures/nginx/internal.json
+++ b/pkg/manifests/fixtures/nginx/internal.json
@@ -82,6 +82,7 @@
         },
         {
           "verbs": [
+            "get",
             "list",
             "watch"
           ],
diff --git a/pkg/manifests/fixtures/nginx/kube-system.json b/pkg/manifests/fixtures/nginx/kube-system.json
index d84d06e8..64b9ca31 100644
--- a/pkg/manifests/fixtures/nginx/kube-system.json
+++ b/pkg/manifests/fixtures/nginx/kube-system.json
@@ -44,6 +44,7 @@
         },
         {
           "verbs": [
+            "get",
             "list",
             "watch"
           ],
diff --git a/pkg/manifests/fixtures/nginx/no-ownership.json b/pkg/manifests/fixtures/nginx/no-ownership.json
index 46a3cdd1..ce5e7bdd 100644
--- a/pkg/manifests/fixtures/nginx/no-ownership.json
+++ b/pkg/manifests/fixtures/nginx/no-ownership.json
@@ -58,6 +58,7 @@
         },
         {
           "verbs": [
+            "get",
             "list",
             "watch"
           ],
diff --git a/pkg/manifests/fixtures/nginx/optional-features-disabled.json b/pkg/manifests/fixtures/nginx/optional-features-disabled.json
index 3f6fa0db..71c74fac 100644
--- a/pkg/manifests/fixtures/nginx/optional-features-disabled.json
+++ b/pkg/manifests/fixtures/nginx/optional-features-disabled.json
@@ -58,6 +58,7 @@
         },
         {
           "verbs": [
+            "get",
             "list",
             "watch"
           ],
diff --git a/pkg/manifests/nginx.go b/pkg/manifests/nginx.go
index 13ce59aa..d489826b 100644
--- a/pkg/manifests/nginx.go
+++ b/pkg/manifests/nginx.go
@@ -159,7 +159,7 @@ func newNginxIngressControllerClusterRole(conf *config.Config, ingressConfig *Ng
 			{
 				APIGroups: []string{"coordination.k8s.io"},
 				Resources: []string{"leases"},
-				Verbs:     []string{"list", "watch"},
+				Verbs:     []string{"get", "list", "watch"},
 			},
 			{
 				APIGroups: []string{""},