mirror of
https://github.com/ansible-collections/kubernetes.core.git
synced 2026-05-08 05:52:37 +00:00
tests/k8s_user_impersonation: adjustement for k8s 1.24 (#520)
tests/k8s_user_impersonation: adjustement for k8s 1.24 In Kubernetes 1.24, ServiceAccount token secrets are no longer automatically generated. See: KEP-2799 Reviewed-by: Bikouo Aubin <None>
This commit is contained in:
@@ -0,0 +1,3 @@
|
|||||||
|
---
|
||||||
|
minor_changes:
|
||||||
|
- "Adjust k8s_user_impersonation tests to be compatible with Kubernetes 1.24 (https://github.com/ansible-collections/kubernetes.core/pull/520)."
|
||||||
@@ -27,6 +27,21 @@
|
|||||||
- "{{ user_01 }}"
|
- "{{ user_01 }}"
|
||||||
- "{{ user_02 }}"
|
- "{{ user_02 }}"
|
||||||
|
|
||||||
|
- name: Create Service token
|
||||||
|
kubernetes.core.k8s:
|
||||||
|
definition:
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
type: kubernetes.io/service-account-token
|
||||||
|
metadata:
|
||||||
|
name: "{{ item }}"
|
||||||
|
annotations:
|
||||||
|
kubernetes.io/service-account.name: "{{ item }}"
|
||||||
|
namespace: "{{ test_ns }}"
|
||||||
|
with_items:
|
||||||
|
- "{{ user_01 }}"
|
||||||
|
- "{{ user_02 }}"
|
||||||
|
|
||||||
- name: Read Service Account - user_01
|
- name: Read Service Account - user_01
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
@@ -38,7 +53,7 @@
|
|||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
kind: Secret
|
kind: Secret
|
||||||
namespace: '{{ test_ns }}'
|
namespace: '{{ test_ns }}'
|
||||||
name: '{{ result.resources[0].secrets[0].name }}'
|
name: '{{ user_01 }}'
|
||||||
no_log: true
|
no_log: true
|
||||||
register: _secret
|
register: _secret
|
||||||
|
|
||||||
@@ -47,7 +62,7 @@
|
|||||||
|
|
||||||
- name: Read Service Account - user_02
|
- name: Read Service Account - user_02
|
||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
kind: ServiceAccount
|
kind: Secret
|
||||||
namespace: "{{ test_ns }}"
|
namespace: "{{ test_ns }}"
|
||||||
name: "{{ user_02 }}"
|
name: "{{ user_02 }}"
|
||||||
register: result
|
register: result
|
||||||
@@ -56,7 +71,7 @@
|
|||||||
kubernetes.core.k8s_info:
|
kubernetes.core.k8s_info:
|
||||||
kind: Secret
|
kind: Secret
|
||||||
namespace: '{{ test_ns }}'
|
namespace: '{{ test_ns }}'
|
||||||
name: '{{ result.resources[0].secrets[0].name }}'
|
name: '{{ user_02 }}'
|
||||||
no_log: true
|
no_log: true
|
||||||
register: _secret
|
register: _secret
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user