@@ -10,8 +10,8 @@ import (
1010)
1111
1212var _ = Describe ("Cluster-level RBAC export" , func () {
13- It ("[MTA-854] Should export two ClusterRoles and two ClusterRoleBindings for one Deployment" , Label ("cluster-admin " ), func () {
14- appName := "nginx-with-serviceaccount "
13+ It ("[MTA-854] Should export two ClusterRoles and two ClusterRoleBindings for one Deployment" , Label ("tier1 " ), func () {
14+ appName := "simple- nginx-nopv "
1515 namespace := "simple-nginx-nopv"
1616 serviceName := "my-" + appName
1717 readClusterRole := "crane-e2e-pod-reader"
@@ -40,10 +40,12 @@ var _ = Describe("Cluster-level RBAC export", func() {
4040 readCRB := ClusterRoleBinding {Name : readClusterRoleBindingName , ClusterRoleName : readClusterRole }
4141 writeCRB := ClusterRoleBinding {Name : writeClusterRoleBindingName , ClusterRoleName : writeClusterRole }
4242 sa := ServiceAccount {Name : "nginx-sa" , Namespace : namespace }
43+
4344 exportOpts := ExportOptions {Namespace : srcApp .Namespace , ExportDir : paths .ExportDir }
4445 transformOpts := TransformOptions {ExportDir : paths .ExportDir , TransformDir : paths .TransformDir }
4546 applyOpts := ApplyOptions {ExportDir : paths .ExportDir , TransformDir : paths .TransformDir ,
4647 OutputDir : paths .OutputDir }
48+
4749 DeferCleanup (func () {
4850 if err := ResourceCleanup ([]KubectlRunner {kubectlSrc , kubectlTgt }, []Resource {readCR , writeCR , readCRB , writeCRB , sa }); err != nil {
4951 log .Printf ("Resources cleanup: %v" , err )
@@ -54,7 +56,7 @@ var _ = Describe("Cluster-level RBAC export", func() {
5456 }
5557 })
5658
57- By ("Deploying app with ServiceAccount on source cluster" )
59+ By ("Deploying app with on source cluster" )
5860 Expect (PrepareSourceApp (srcApp , kubectlSrc )).NotTo (HaveOccurred ())
5961
6062 By ("Creating ClusterRole with pod read permissions" )
@@ -69,6 +71,9 @@ var _ = Describe("Cluster-level RBAC export", func() {
6971 By ("Creating ClusterRoleBinding for write ClusterRole" )
7072 Expect (writeCRB .Create (kubectlSrc )).NotTo (HaveOccurred ())
7173
74+ By ("Creating Service-Account on Namespace" )
75+ Expect (sa .Create (kubectlSrc )).NotTo (HaveOccurred ())
76+
7277 By ("Bind Relevent Service-Account to Read cluster role" )
7378 Expect (readCRB .AddSubject (kubectlSrc , sa )).NotTo (HaveOccurred ())
7479
0 commit comments