From deploying the example manifest (not helm), I needed to add the following block in the ClusterRole:

- apiGroups: [''] resources: [endpoints] verbs: [get, patch, update] 

To remove this error message:

leaderelection.go:324] error retrieving resource lock kube-system/draino: endpoints "draino" is forbidden: User "system:serviceaccount:kube-system:draino" cannot get resource "endpoints" in API group "" in the namespace "kube-system"

Would you guys be open to a PR for this?