fix: add RBAC manifest for E2E CI runner + namespace correction (PRI-550) #135
@@ -19,7 +19,7 @@ concurrency:
|
||||
cancel-in-progress: false
|
||||
|
||||
env:
|
||||
E2E_NAMESPACE: privilegedescalation-dev
|
||||
E2E_NAMESPACE: headlamp-dev
|
||||
E2E_RELEASE: headlamp-e2e
|
||||
# Pin to a known-good Headlamp version. Using :latest is risky because
|
||||
# the tag can change between CI runs, causing flaky failures when a newer
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
#
|
||||
# Grants the GitHub Actions runner's service account (Arc Runners) the minimum
|
||||
# permissions needed to deploy/teardown an E2E Headlamp instance in the
|
||||
# privilegedescalation-dev namespace.
|
||||
# headlamp-dev namespace (override via E2E_NAMESPACE when needed).
|
||||
#
|
||||
# Applied automatically by the E2E workflow before deploy-e2e-headlamp.sh runs.
|
||||
@@ -11,7 +10,7 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: e2e-ci-runner
|
||||
namespace: privilegedescalation-dev
|
||||
namespace: headlamp-dev
|
||||
rules:
|
||||
- apiGroups: ["rbac.authorization.k8s.io"]
|
||||
resources: ["roles", "rolebindings"]
|
||||
@@ -33,7 +32,7 @@ apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: e2e-ci-runner
|
||||
namespace: privilegedescalation-dev
|
||||
namespace: headlamp-dev
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: runners-privilegedescalation-gha-rs-no-permission
|
||||
@@ -41,4 +40,4 @@ subjects:
|
||||
roleRef:
|
||||
kind: Role
|
||||
name: e2e-ci-runner
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
|
||||
Reference in New Issue
Block a user