fix: add RBAC manifest for E2E CI runner + namespace correction (PRI-550) #135

Closed
privilegedescalation-engineer[bot] wants to merge 5 commits from pr-132-fix into main
2 changed files with 4 additions and 5 deletions
Showing only changes of commit 904c7d466a - Show all commits
+1 -1
View File
@@ -19,7 +19,7 @@ concurrency:
cancel-in-progress: false
env:
E2E_NAMESPACE: privilegedescalation-dev
E2E_NAMESPACE: headlamp-dev
E2E_RELEASE: headlamp-e2e
# Pin to a known-good Headlamp version. Using :latest is risky because
# the tag can change between CI runs, causing flaky failures when a newer
+3 -4
View File
@@ -3,7 +3,6 @@
#
# Grants the GitHub Actions runner's service account (Arc Runners) the minimum
# permissions needed to deploy/teardown an E2E Headlamp instance in the
# privilegedescalation-dev namespace.
# headlamp-dev namespace (override via E2E_NAMESPACE when needed).
#
# Applied automatically by the E2E workflow before deploy-e2e-headlamp.sh runs.
@@ -11,7 +10,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: e2e-ci-runner
namespace: privilegedescalation-dev
namespace: headlamp-dev
rules:
- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "rolebindings"]
@@ -33,7 +32,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: e2e-ci-runner
namespace: privilegedescalation-dev
namespace: headlamp-dev
subjects:
- kind: ServiceAccount
name: runners-privilegedescalation-gha-rs-no-permission
@@ -41,4 +40,4 @@ subjects:
roleRef:
kind: Role
name: e2e-ci-runner
apiGroup: rbac.authorization.k8s.io
apiGroup: rbac.authorization.k8s.io