Skip to content

Commit 45c8342

Browse files
Add sdk-user with limited permissions to run e2e test
1 parent d9b725d commit 45c8342

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

.github/workflows/e2e_tests.yaml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,23 @@ jobs:
9393
9494
cd ..
9595
96+
- name: Add user to KinD
97+
uses: ./common/github-actions/kind-add-user
98+
with:
99+
user-name: sdk-user
100+
101+
- name: Configure RBAC for sdk user with limited permissions
102+
run: |
103+
kubectl create clusterrole list-ingresses --verb=get,list --resource=ingresses
104+
kubectl create clusterrolebinding sdk-user-list-ingresses --clusterrole=list-ingresses --user=sdk-user
105+
kubectl create clusterrole appwrapper-creator --verb=get,list,create,delete,patch --resource=appwrappers
106+
kubectl create clusterrolebinding sdk-user-appwrapper-creator --clusterrole=appwrapper-creator --user=sdk-user
107+
kubectl create clusterrole namespace-creator --verb=get,list,create,delete,patch --resource=namespaces
108+
kubectl create clusterrolebinding sdk-user-namespace-creator --clusterrole=namespace-creator --user=sdk-user
109+
kubectl create clusterrole list-rayclusters --verb=get,list --resource=rayclusters
110+
kubectl create clusterrolebinding sdk-user-list-rayclusters --clusterrole=list-rayclusters --user=sdk-user
111+
kubectl config use-context sdk-user
112+
96113
- name: Run e2e tests
97114
run: |
98115
export CODEFLARE_TEST_TIMEOUT_SHORT=1m

0 commit comments

Comments
 (0)