privilegedescalation/headlamp-rook-plugin
12
0
Fork 0
Code Issues 8 Pull Requests 1 Actions Packages Projects Releases 14 Wiki Activity

fix(e2e): add cluster-scoped RBAC for E2E service account #60

Closed
privilegedescalation-engineer[bot] wants to merge 1 commits from gandalf/fix-e2e-rbac-cluster-scoped-permissions into main
pull from: gandalf/fix-e2e-rbac-cluster-scoped-permissions
merge into: privilegedescalation:main
Conversation 3 Commits 1 Files Changed 2
+48 -4

1 Commits

Author SHA1 Message Date
Chris Farhood 169d2ec91b fix(e2e): add cluster-scoped RBAC for E2E service account 
The headlamp-e2e-test service account needs cluster-wide read permissions
for storageclasses, cephclusters, persistentvolumes, and
persistentvolumeclaims so the Rook plugin sidebar can populate these
resources without errors.

- Add ClusterRole headlamp-e2e-test-reader with get/list/watch on
  storageclasses, cephclusters, cephclusters/status, persistentvolumes,
  persistentvolumeclaims
- Add ClusterRoleBinding headlamp-e2e-test-crb binding the role to
  the headlamp-e2e-test service account
- Update teardown to also clean up the ClusterRole and ClusterRoleBinding

Fixes: PRI-741

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-05 16:12:03 +00:00