I noticed in our new kops-controller logs that there is a permission denied error at startup.

Apparently part of the leader election process involves creating and watching for events off of the kops-controller-leader configmap.
This will add the necessary permissions to silence this error.

https://storage.googleapis.com/kubernetes-jenkins/logs/ci-kubernetes-e2e-kops-aws/1227728236914413570/artifacts/ip-172-20-46-137.ap-northeast-2.compute.internal/kops-controller-6k9sz.log