privilegedescalation/headlamp-polaris-plugin
Archived
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 50 Wiki Activity

debug(e2e): add verbose kubectl output to diagnose RBAC apply failure

Browse Source 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Chris Farhood
2026-05-04 17:19:00 +00:00
committed by Hugh Hackman [agent]
parent 599d5e4be7
commit 7079d2ff0d
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/e2e.yaml
+6 -2
View File
@@ -47,11 +47,15 @@ jobs:
- name: Apply RBAC for E2E pipeline - name: Apply RBAC for E2E pipeline
run: | run: |
kubectl apply -f deployment/e2e-ci-runner-rbac.yaml set -x
kubectl apply -f deployment/e2e-ci-runner-rbac.yaml --dry-run=server 2>&1 || true
kubectl apply -f deployment/e2e-ci-runner-rbac.yaml 2>&1
echo "exit code: $?"
echo "Waiting for RBAC propagation (Kubernetes subject access review caching)..." echo "Waiting for RBAC propagation (Kubernetes subject access review caching)..."
sleep 5 sleep 5
echo "Verifying CI runner permissions..." echo "Verifying CI runner permissions..."
kubectl auth can-i create roles -n headlamp-dev --as="system:serviceaccount:arc-runners:runners-privilegedescalation-gha-rs-no-permission" || { echo "::error::CI runner still lacks roles permission after propagation wait"; exit 1; } kubectl auth can-i create roles -n headlamp-dev --as="system:serviceaccount:arc-runners:runners-privilegedescalation-gha-rs-no-permission" 2>&1 || { echo "::error::CI runner still lacks roles permission after propagation wait"; exit 1; }
set +x
- name: Apply Polaris dashboard RBAC - name: Apply Polaris dashboard RBAC
run: kubectl apply -f deployment/polaris-rbac.yaml run: kubectl apply -f deployment/polaris-rbac.yaml