From 5997fb5e7e5341cc6698807ee8cf8214db022098 Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Wed, 6 May 2026 16:17:45 +0000 Subject: [PATCH] fix(e2e): remove pods/log from RBAC to fix escalation error The CI runner SA cannot grant permissions it doesn't hold. Adding pods/log caused: "attempting to grant RBAC permissions not currently held". Remove it to match the infra-managed Role. Co-Authored-By: Paperclip --- deployment/e2e-ci-runner-rbac.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/deployment/e2e-ci-runner-rbac.yaml b/deployment/e2e-ci-runner-rbac.yaml index 67bea4c..b5a0853 100644 --- a/deployment/e2e-ci-runner-rbac.yaml +++ b/deployment/e2e-ci-runner-rbac.yaml @@ -25,9 +25,6 @@ rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["pods/log"] - verbs: ["get"] - apiGroups: [""] resources: ["serviceaccounts/token"] verbs: ["create"]