This is an automated email from the ASF dual-hosted git repository.
astefanutti pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-k.git
commit 1725d7427bf318340d240161ea36c88197dbd884
Author: Antonin Stefanutti <anto...@stefanutti.fr>
AuthorDate: Tue Nov 30 21:01:27 2021 +0100
chore(e2e): Aggregate finalizers permission to the default admin role
---
.github/workflows/openshift.yml | 17 +++++++++++++++--
1 file changed, 15 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/openshift.yml b/.github/workflows/openshift.yml
index f416e73..36c7c7a 100644
--- a/.github/workflows/openshift.yml
+++ b/.github/workflows/openshift.yml
@@ -170,7 +170,6 @@ jobs:
metadata:
name: camel-k-test:eviction
labels:
- app: "camel-k"
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
- apiGroups: [""]
@@ -178,7 +177,7 @@ jobs:
verbs: ["create"]
EOF
- # Aggregate nodes permission to the default admin role
+ # Grant nodes permission to the default developer user
cat <<EOF | oc apply -f -
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
@@ -203,6 +202,20 @@ jobs:
apiGroup: rbac.authorization.k8s.io
EOF
+ # Aggregate finalizers permission to the default admin role
+ cat <<EOF | oc apply -f -
+ kind: ClusterRole
+ apiVersion: rbac.authorization.k8s.io/v1
+ metadata:
+ name: camel-k-test:finalizers
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+ rules:
+ - apiGroups: ["camel.apache.org"]
+ resources: ["*/finalizers"]
+ verbs: ["update"]
+ EOF
+
# Login as normal user
oc login -u developer
