Commit 5e67f84
committed
Fix e2e test RBAC: add bind/escalate verbs
Scoped ServiceAccount clients need `bind` and `escalate` verbs
to create ClusterRoleBindings. The admin client previously used
bypassed this RBAC requirement.
The documentation (docs/concepts/permission-model.md) already specifies
that ServiceAccounts need `bind` and `escalate` verbs for RBAC resources
to install extensions with their own RBAC.
The e2e test template was missing these verbs, causing tests to fail when
using scoped ServiceAccount clients (which properly enforce Kubernetes RBAC)
instead of the admin client.1 parent 2a2d85c commit 5e67f84
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
50 | 50 | | |
51 | 51 | | |
52 | 52 | | |
53 | | - | |
| 53 | + | |
54 | 54 | | |
55 | 55 | | |
56 | 56 | | |
| |||
0 commit comments