[ws-manager-mk2] Configure leader election

Author: WVerlaek

components/ws-manager-mk2/main.go

@@ -89,7 +89,7 @@ func main() {
 		Port:                   9443,
 		HealthProbeBindAddress: ":9090",
 		LeaderElection:         enableLeaderElection,
-		LeaderElectionID:       "0616d21e.gitpod.io",
+		LeaderElectionID:       "ws-manager-mk2.gitpod.io",
 		Namespace:              cfg.Manager.Namespace,
 	})
 	if err != nil {

install/installer/pkg/components/ws-manager-mk2/deployment.go

@@ -53,8 +53,11 @@ func deployment(ctx *common.RenderContext) ([]runtime.Object, error) {
 			RunAsUser: pointer.Int64(31002),
 		},
 		Containers: []corev1.Container{{
-			Name:            Component,
-			Args:            []string{"--config", "/config/config.json"},
+			Name: Component,
+			Args: []string{
+				"--config", "/config/config.json",
+				"--leader-elect",
+			},
 			Image:           ctx.ImageName(ctx.Config.Repository, Component, ctx.VersionManifest.Components.WSManagerMk2.Version),
 			ImagePullPolicy: corev1.PullIfNotPresent,
 			Resources: common.ResourceRequirements(ctx, Component, Component, corev1.ResourceRequirements{

install/installer/pkg/components/ws-manager-mk2/role.go

@@ -69,6 +69,41 @@ func role(ctx *common.RenderContext) ([]runtime.Object, error) {
 						"update",
 					},
 				},
+				// ConfigMap, Leases, and Events access is required for leader-election.
+				{
+					APIGroups: []string{""},
+					Resources: []string{"configmaps"},
+					Verbs: []string{
+						"create",
+						"delete",
+						"get",
+						"list",
+						"patch",
+						"update",
+						"watch",
+					},
+				},
+				{
+					APIGroups: []string{"coordination.k8s.io"},
+					Resources: []string{"leases"},
+					Verbs: []string{
+						"create",
+						"delete",
+						"get",
+						"list",
+						"patch",
+						"update",
+						"watch",
+					},
+				},
+				{
+					APIGroups: []string{""},
+					Resources: []string{"events"},
+					Verbs: []string{
+						"create",
+						"patch",
+					},
+				},
 			},
 		},
 	}, nil