From 8e705a5a495a7f280f5a1a8c4a271a675fb84b3d Mon Sep 17 00:00:00 2001 From: Eron Wright Date: Thu, 10 Oct 2024 12:23:13 -0700 Subject: [PATCH] e2e manifests --- .../testdata/git-auth-nonroot/manifests.yaml | 21 +++++++++++++++++++ .../random-yaml-nonroot/manifests.yaml | 2 +- 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/operator/e2e/testdata/git-auth-nonroot/manifests.yaml b/operator/e2e/testdata/git-auth-nonroot/manifests.yaml index 8c49211d..848417f7 100644 --- a/operator/e2e/testdata/git-auth-nonroot/manifests.yaml +++ b/operator/e2e/testdata/git-auth-nonroot/manifests.yaml @@ -24,6 +24,26 @@ metadata: stringData: accessToken: $PULUMI_BOT_TOKEN --- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: git-auth-nonroot + namespace: git-auth-nonroot +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: git-auth-nonroot:system:auth-delegator + namespace: git-auth-nonroot +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: system:auth-delegator +subjects: +- kind: ServiceAccount + name: git-auth-nonroot + namespace: git-auth-nonroot +--- apiVersion: pulumi.com/v1 kind: Stack metadata: @@ -54,6 +74,7 @@ spec: value: "test" workspaceTemplate: spec: + serviceAccountName: git-auth-nonroot image: pulumi/pulumi:3.134.1-nonroot podTemplate: spec: diff --git a/operator/e2e/testdata/random-yaml-nonroot/manifests.yaml b/operator/e2e/testdata/random-yaml-nonroot/manifests.yaml index 199021ef..8c79d0ba 100644 --- a/operator/e2e/testdata/random-yaml-nonroot/manifests.yaml +++ b/operator/e2e/testdata/random-yaml-nonroot/manifests.yaml @@ -1,7 +1,7 @@ apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: - name: allow-pulumi-operator-workspace-fetch + name: allow-random-yaml-nonroot-fetch namespace: flux-system spec: podSelector: