[test_operator] Add RBAC for test pod exec#4014
Conversation
Test plugins like `nfv-tempest-plugin` use the Kubernetes Python client to exec into other pods (e.g. `openstackclient`) via `connect_get_namespaced_pod_exec`. The default service account in the test namespace lacks `pods/exec` permissions, causing 403 Forbidden errors during test execution. Create a Role and RoleBinding granting `get`/`create` on `pods/exec` and `get`/`list` on `pods` to the default service account before starting the test CR. Assisted-By: Claude Code (Anthropic)
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 21m 08s |
1 participant
Test plugins like
nfv-tempest-pluginuse the Kubernetes Python client to exec into other pods (e.g.openstackclient) viaconnect_get_namespaced_pod_exec. The default service account in the test namespace lackspods/execpermissions, causing 403 Forbidden errors during test execution.Create a Role and RoleBinding granting
get/createonpods/execandget/listonpodsto the default service account before starting the test CR.Assisted-By: Claude Code (Anthropic)