Gandalf the Greybeard
6e9c97593c
Per org RBAC policy, development/testing Headlamp instances must run in `privilegedescalation-dev`, not `default`. Agents only have read-write access in `privilegedescalation` and `privilegedescalation-dev` — the `default` namespace is outside our permitted scope. Updated: - deployment/e2e-ci-runner-rbac.yaml: Role/RoleBinding now targets privilegedescalation-dev - deployment/headlamp-e2e-values.yaml: comment updated - scripts/deploy-e2e-headlamp.sh: default namespace changed - scripts/teardown-e2e-headlamp.sh: default namespace changed Note: .github/workflows/e2e.yaml still sets E2E_NAMESPACE: default and needs a separate update — delegated to Hugh Hackman (workflow owner). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
32 lines
793 B
YAML
32 lines
793 B
YAML
---
|
|
# Headlamp Helm values for E2E testing.
|
|
#
|
|
# Uses the stock Headlamp image with the plugin loaded via a ConfigMap
|
|
# volume mount. No custom Docker images — the plugin dist/ is packaged
|
|
# as a ConfigMap by deploy-e2e-headlamp.sh.
|
|
#
|
|
# Usage:
|
|
# helm install headlamp-e2e headlamp/headlamp \
|
|
# -n privilegedescalation-dev \
|
|
# -f deployment/headlamp-e2e-values.yaml \
|
|
# --set image.registry=ghcr.io \
|
|
# --set image.repository=headlamp-k8s/headlamp \
|
|
# --set image.tag=latest
|
|
|
|
config:
|
|
pluginsDir: /headlamp/plugins
|
|
watchPlugins: false
|
|
|
|
service:
|
|
type: ClusterIP
|
|
|
|
extraVolumes:
|
|
- name: polaris-plugin
|
|
configMap:
|
|
name: headlamp-polaris-plugin
|
|
|
|
extraVolumeMounts:
|
|
- name: polaris-plugin
|
|
mountPath: /headlamp/plugins/headlamp-polaris
|
|
readOnly: true
|