From d6c8a8bbfc26d34228fb3e0613b77be3cc179ddb Mon Sep 17 00:00:00 2001
From: Hugh Hackman <hugh@privilegedescalation.com>
Date: Sat, 21 Mar 2026 20:08:25 +0000
Subject: [PATCH] fix: disable ClusterRoleBinding creation in E2E Helm values
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Headlamp chart defaults to creating a ClusterRoleBinding, but the
ARC runner service account lacks cluster-scoped RBAC permissions. E2E
tests only need Headlamp to serve the UI — no cluster-admin required.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 deployment/headlamp-e2e-values.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/deployment/headlamp-e2e-values.yaml b/deployment/headlamp-e2e-values.yaml
index 8bd540d..dddd973 100644
--- a/deployment/headlamp-e2e-values.yaml
+++ b/deployment/headlamp-e2e-values.yaml
@@ -17,6 +17,9 @@ config:
   pluginsDir: /headlamp/plugins
   watchPlugins: false
 
+clusterRoleBinding:
+  create: false
+
 service:
   type: ClusterIP