This repository has been archived on 2026-06-16. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Hugh Hackman 2734e0f554 revert(e2e): remove Apply RBAC step — CI runner lacks RBAC read permissions ...

The CI runner service account (runners-privilegedescalation-gha-rs-no-permission)
does not have `get` on roles/rolebindings, so kubectl apply returns Forbidden
before it can apply anything. This is a circular dependency: the runner needs
RBAC to operate, but can't apply its own RBAC.

The correct fix is to bootstrap the privilegedescalation/infra repo into
the cluster's Flux instance. The RBAC manifest is already at
base/rbac/e2e-ci-runner-rbac.yaml with a kustomization — Flux will apply it
once the infra-production GitRepository+Kustomization are registered with
the cluster's Flux.

See: https://github.com/privilegedescalation/headlamp-polaris-plugin/issues/79

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-21 14:16:13 +00:00

..

ci.yaml

Merge PR #20

2026-03-08 11:16:32 +00:00

e2e.yaml

revert(e2e): remove Apply RBAC step — CI runner lacks RBAC read permissions

2026-03-21 14:16:13 +00:00

release.yaml

ci: pass GitHub App token secrets to release workflow (#76)

2026-03-20 13:24:35 +00:00