Added pod permissions in etcd-role (#372) (#379)

* Added pod permissions in etcd-role

* Updated unit tests

* Removed unneeded pod permissions

charts/etcd/templates/etcd-role.yaml

@@ -36,4 +36,12 @@ rules:
   - list
   - patch
   - update
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
   - watch

controllers/etcd_controller_test.go

@@ -953,6 +953,19 @@ func validateRole(instance *druidv1alpha1.Etcd, role *rbac.Role) {
 					"watch":  Equal("watch"),
 				}),
 			}),
+			"": MatchFields(IgnoreExtras, Fields{
+				"APIGroups": MatchAllElements(stringArrayIterator, Elements{
+					"": Equal(""),
+				}),
+				"Resources": MatchAllElements(stringArrayIterator, Elements{
+					"pods": Equal("pods"),
+				}),
+				"Verbs": MatchAllElements(stringArrayIterator, Elements{
+					"list":  Equal("list"),
+					"get":   Equal("get"),
+					"watch": Equal("watch"),
+				}),
+			}),
 		}),
 	}))
 }