privilegedescalation/headlamp-polaris-plugin
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 50 Wiki Activity

fix: add RBAC manifest for E2E CI runner + namespace correction (PRI-550) #135

Closed
privilegedescalation-engineer[bot] wants to merge 5 commits from pr-132-fix into main
pull from: pr-132-fix
merge into: privilegedescalation:main
Conversation 1 Commits 5 Files Changed 2
+19 -19

5 Commits

Author SHA1 Message Date
Chris Farhood 904c7d466a fix: namespace correction to headlamp-dev + cosmetic fixes (PRI-555) 
- Revert E2E_NAMESPACE from privilegedescalation-dev to headlamp-dev
  (Arc Runners operate in headlamp-dev per PRI-555 comment)
- RBAC manifest: fix orphaned duplicate comment on line 6
- RBAC manifest: restore missing EOF newline
- RBAC manifest: correct namespace fields from privilegedescalation-dev to headlamp-dev
- RBAC manifest: tighten permissions to minimum required
- Workflow: add RBAC apply step before deploy-e2e-headlamp.sh
 2026-05-05 00:56:27 +00:00
Chris Farhood cafc7eed9f chore: re-trigger E2E with updated infra RBAC (infra fix applied) 2026-05-05 00:26:50 +00:00
Chris Farhood e15db57f57 fix: add roles/rolebindings permissions to RBAC manifest (PRI-550) 
kubectl apply requires get/list/watch on roles/rolebindings to check
existing state before patching. Without these, apply fails with
Forbidden on the GET call itself.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-04 19:40:24 +00:00
Chris Farhood 25530faf84 fix: add RBAC apply step to E2E workflow (PRI-550) 
Adds 'kubectl apply -f deployment/e2e-ci-runner-rbac.yaml' step to
the E2E workflow before the deploy script runs.

Also corrects E2E_NAMESPACE from headlamp-dev to privilegedescalation-dev
to match the actual namespace where Arc Runners operates.

Fixes PRI-550.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-04 19:30:17 +00:00
Chris Farhood 84bd885b56 Add RBAC manifest for E2E CI runner 
Adds deployment/e2e-ci-runner-rbac.yaml which grants the Arc Runners
service account the minimum permissions to deploy/teardown an
E2E Headlamp instance in headlamp-dev (or privilegedescalation-dev
when E2E_NAMESPACE is overridden).

Note: polaris-plugin also needs the E2E_NAMESPACE in the workflow
env block changed to privilegedescalation-dev to match intel-gpu-plugin.

Fixes PRI-550.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-04 19:29:53 +00:00