change: refresh token

Author: fege

tests/model_registry/conftest.py

@@ -308,7 +308,7 @@ def model_registry_pod(admin_client: DynamicClient, model_registry_namespace: st
     return mr_pod[0]
 
 
-@pytest.fixture(scope="module")
+@pytest.fixture(scope="class")
 def sa_namespace(request: pytest.FixtureRequest, admin_client: DynamicClient) -> Generator[Namespace, None, None]:
     """
     Creates a namespace

tests/model_registry/rbac/test_mr_rbac_sa.py

@@ -4,6 +4,7 @@
 from simple_logger.logger import get_logger
 from model_registry import ModelRegistry as ModelRegistryClient
 from tests.model_registry.rbac.utils import build_mr_client_args
+from utilities.infra import create_inference_token
 from mr_openapi.exceptions import ForbiddenException
 
 LOGGER = get_logger(name=__name__)
@@ -57,7 +58,7 @@ def test_service_account_access_denied(
     @pytest.mark.usefixtures("sa_namespace", "service_account", "mr_access_role", "mr_access_role_binding")
     def test_service_account_access_granted(
         self: Self,
-        sa_token: str,
+        service_account,
         model_registry_instance_rest_endpoint: list[str],
     ):
         """
@@ -67,9 +68,12 @@ def test_service_account_access_granted(
         LOGGER.info(f"Targeting Model Registry REST endpoint: {model_registry_instance_rest_endpoint[0]}")
         LOGGER.info("Applied RBAC Role/Binding via fixtures. Expecting access GRANT.")
 
+        # Create a fresh token to bypass OAuth proxy cache from previous test
+        fresh_token = create_inference_token(model_service_account=service_account)
+
         try:
             client_args = build_mr_client_args(
-                rest_endpoint=model_registry_instance_rest_endpoint[0], token=sa_token, author="rbac-test-granted"
+                rest_endpoint=model_registry_instance_rest_endpoint[0], token=fresh_token, author="rbac-test-granted"
             )
             LOGGER.debug(f"Attempting client connection with args: {client_args}")
             mr_client_success = ModelRegistryClient(**client_args)