Add RBAC pre-flight check to E2E pipeline #123

Closed
privilegedescalation-engineer[bot] wants to merge 6 commits from fix/pri-264-rbac-preflight-check into main
Showing only changes of commit 53475296db - Show all commits
+8 -19
View File
@@ -45,31 +45,20 @@ jobs:
- name: Setup kubectl - name: Setup kubectl
uses: azure/setup-kubectl@v4 uses: azure/setup-kubectl@v4
- name: Apply RBAC for Polaris dashboard proxy
run: kubectl apply -f deployment/polaris-rbac.yaml
- name: RBAC pre-flight check - name: RBAC pre-flight check
run: | run: |
echo "Checking RBAC resources in polaris namespace..." echo "Checking RBAC resources in polaris namespace..."
MISSING_ROLE=false if kubectl get role polaris-dashboard-proxy-reader -n polaris -o name >/dev/null 2>&1 && \
MISSING_ROLEBINDING=false kubectl get rolebinding polaris-dashboard-proxy-reader -n polaris -o name >/dev/null 2>&1; then
echo "RBAC pre-flight check passed."
if ! kubectl get role polaris-dashboard-proxy-reader -n polaris --quiet 2>/dev/null; then else
echo "::error::Role polaris-dashboard-proxy-reader not found in polaris namespace." echo "::error::Role or RoleBinding not found in polaris namespace after apply."
MISSING_ROLE=true
fi
if ! kubectl get rolebinding polaris-dashboard-proxy-reader -n polaris --quiet 2>/dev/null; then
echo "::error::RoleBinding polaris-dashboard-proxy-reader not found in polaris namespace."
MISSING_ROLEBINDING=true
fi
if [ "$MISSING_ROLE" = true ] || [ "$MISSING_ROLEBINDING" = true ]; then
echo ""
echo "::error::RBAC not applied. Apply the RBAC manifests before running E2E tests:"
echo "::error:: kubectl apply -f deployment/polaris-rbac.yaml"
exit 1 exit 1
fi fi
echo "RBAC pre-flight check passed."
- name: Install dependencies - name: Install dependencies
run: npm ci run: npm ci