add events and leases resources to postgres-pod role

manifests/operator-service-account-rbac-openshift.yaml

@@ -269,6 +269,27 @@ rules:
   - list
   - patch
   - update
+- apiGroups: [""]
+  resources:
+    - events  # Patroni may log to events
+  verbs:
+    - create
+    - get
+    - list
+    - patch
+    - update
+    - watch
+- apiGroups: ["coordination.k8s.io"]
+  resources:
+    - leases  # Only if Patroni tries to use K8s Leases
+  verbs:
+    - create
+    - get
+    - list
+    - update
+    - delete
+    - watch
+    - patch
 # Patroni needs to watch and manage config maps
 - apiGroups:
   - ""
@@ -301,6 +322,15 @@ rules:
   - services
   verbs:
   - create
+  # to check nodes for node readiness label
+- apiGroups:
+    - ""
+  resources:
+    - nodes
+  verbs:
+    - get
+    - list
+    - watch
 # to grant privilege to run privileged pods (not needed by default)
 #- apiGroups:
 #  - extensions