privilegedescalation/headlamp-polaris-plugin
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 50 Wiki Activity

fix(e2e): apply both RBAC manifests in workflow before pre-flight check #125

Closed
privilegedescalation-engineer[bot] wants to merge 1 commits from fix/e2e-workflow-rbac into main
pull from: fix/e2e-workflow-rbac
merge into: privilegedescalation:main
Conversation 3 Commits 1 Files Changed 2
+46

1 Commits

Author SHA1 Message Date
Chris Farhood 3c6d77eb49 fix(e2e): apply RBAC in workflow before pre-flight check 
The E2E workflow now applies both RBAC manifests (e2e-ci-runner-rbac.yaml
and polaris-rbac.yaml) in the same step, then verifies permissions with a
two-namespace pre-flight check. This makes the workflow self-sufficient — no
manual RBAC application or cluster-prep step required before CI runs.

Changes:
- Workflow now applies e2e-ci-runner-rbac.yaml + polaris-rbac.yaml before
  the pre-flight check (previously only applied polaris-rbac.yaml and only
  checked, not applied, e2e-ci-runner-rbac.yaml)
- Pre-flight check verifies can-i delete configmaps in privilegedescalation-dev
  AND can-i get services/proxy in polaris before proceeding
- e2e-ci-runner-rbac.yaml now includes Role + RoleBinding for the polaris
  namespace so the CI runner can apply the dashboard proxy RBAC

Fixes PRI-264 / PRI-324.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-03 18:24:21 +00:00