privilegedescalation-engineer[bot] 836e50fa9c fix(e2e): add kubeconfig step for ARC runners with no static kubeconfig (#149)
The shared plugin-e2e.yaml workflow lacks a Get kubeconfig step. The
ARC runner (runners-privilegedescalation) has no static kubeconfig at
any expected path (/runner/config, ~/.kube/config). It DOES have an
in-cluster service account at /var/run/secrets/kubernetes.io/serviceaccount/token.

This fix adds the same three-tier kubeconfig detection used in
headlamp-polaris-plugin#144:
1. /runner/config (not present on this runner)
2. ~/.kube/config (not present on this runner)
3. Generate from in-cluster service account credentials

This unbreaks E2E for all plugins using the shared workflow:
- headlamp-argocd-plugin
- headlamp-kube-vip-plugin
- headlamp-tns-csi-plugin

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-06 16:45:33 +00:00
2026-03-09 10:21:49 +00:00
2026-03-07 15:23:04 +00:00
S
Description
Privileged Escalation organization configuration and governance
Readme 2.7 MiB
Languages
Shell 100%