test: test gcloud service account kube

Laurin-Notemann · Laurin-Notemann · commit 94944576fd21 · 2024-05-15T18:57:21.000+02:00
diff --git a/.github/workflows/test-workflow.yml b/.github/workflows/test-workflow.yml
@@ -23,4 +23,15 @@ jobs:
         with:
           create_credentials_file: true
           workload_identity_provider: 'projects/1006240973223/locations/global/workloadIdentityPools/gha-create-gke-cluster/providers/github-actions'
-          service_account: 'terraform-gke@code-idp.iam.gserviceaccount.com'
+          service_account: 'kube-deploy-student-projects@code-idp.iam.gserviceaccount.com'
+      - name: Set up kubectl
+        uses: azure/setup-kubectl@v3
+        with:
+          version: 'v1.28.0' 
+      - name: Configure gcloud CLI
+        run: |
+          gcloud config set project code-idp
+          gcloud container clusters get-credentials code-idp-gke --zone europe-west1
+      - name: Deploy to GKE
+        run: |
+          kubectl get pods -n submissions-2024
diff --git a/kubernetes-terraform-config/main.tf b/kubernetes-terraform-config/main.tf
@@ -193,6 +193,13 @@ resource "kubernetes_role_binding" "github_actions_rolebinding" {
     name      = kubernetes_service_account.github_actions_account.metadata[0].name
     namespace = kubernetes_namespace.submissions_namespace.metadata[0].name
   }
+
+  subject {
+    kind      = "User"
+    name      = "kube-deploy-student-projects@code-idp.iam.gserviceaccount.com"
+    namespace = kubernetes_namespace.submissions_namespace.metadata[0].name
+    api_group = "rbac.authorization.k8s.io"
+  }
 }
 
 resource "kubernetes_secret" "github_actions_token" {

Original file line number	Diff line number	Diff line change
`@@ -193,6 +193,13 @@ resource "kubernetes_role_binding" "github_actions_rolebinding" {`
`193`	`193`	`name = kubernetes_service_account.github_actions_account.metadata[0].name`
`194`	`194`	`namespace = kubernetes_namespace.submissions_namespace.metadata[0].name`
`195`	`195`	`}`
	`196`	`+`
	`197`	`+ subject {`
	`198`	`+ kind = "User"`
	`199`	`+ name = "[email protected]"`
	`200`	`+ namespace = kubernetes_namespace.submissions_namespace.metadata[0].name`
	`201`	`+ api_group = "rbac.authorization.k8s.io"`
	`202`	`+ }`
`196`	`203`	`}`
`197`	`204`
`198`	`205`	`resource "kubernetes_secret" "github_actions_token" {`