Merge pull request #183 from nrwl/allow-leases

feat(nx-agents): Allow leases get/create/update

Author: pmariglia

agents-guide/AGENTS-GUIDE.md

@@ -62,6 +62,12 @@ Note on storage:
    - `AZURE_CONNECTION_STRING=...`
 4. You'll then need to make sure your pods either have the correct service account attached for interacting with the above buckets (see [the AWS example](./AWS-AGENTS-GUIDE.md#connecting-an-s3-bucket))
 
+### Kubernetes permissions
+
+The Nx Agents helm chart requires certain Kubernetes RBAC permissions to function correctly. The chart includes a Role and RoleBinding that grant the necessary permissions to the workflow controller service account.
+
+If you are managing permissions yourself (e.g., using a pre-existing service account or a separate RBAC configuration), please consult the permissions defined in [`charts/nx-agents/templates/roles.yaml`](../charts/nx-agents/templates/roles.yaml) to ensure your configuration includes all required permissions.
+
 ### Connect NxCloud to your Nx Agents deployment
 
 These are the options you can use to configure how NxCloud connects to your Nx Agents cluster.

charts/nx-agents/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: nx-agents
 description: Nx Cloud Agents Helm Chart
 type: application
-version: 1.2.14
+version: 1.3.0
 maintainers:
   - name: nx
     url: "https://nx.app/"

charts/nx-agents/templates/roles.yaml

@@ -61,6 +61,14 @@ rules:
     - jobs/status
   verbs:
     - get
+- apiGroups:
+    - coordination.k8s.io
+  resources:
+    - leases
+  verbs:
+    - get
+    - create
+    - update
 {{- end }}
 {{- if not .Values.roles.runner.existingRole }}
 ---