Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Support AssertRBAC test #24

Open
spacetj opened this issue Mar 25, 2020 · 0 comments
Open

Feature: Support AssertRBAC test #24

spacetj opened this issue Mar 25, 2020 · 0 comments

Comments

@spacetj
Copy link
Contributor

spacetj commented Mar 25, 2020

Description

Provide the ability to assert the RBAC permissions provided to a serviceAccount / user.

Basic Example

- type: AssertLog
  spec:
    resource: pods
    action: CREATE
    user: [email protected] # Alternatively, allow specifying a new kubeconfig file just for this test

Motivation

Often times, centralised CI/CD teams require service account with certain capabilities in our cluster such as creation of deployments, configmaps etc. This type of test will help the centralised team to ensure that the required permissions are present.

@spacetj spacetj changed the title Support AssertRBAC test Feature: Support AssertRBAC test Mar 25, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant