retur to using COVERAGE_HOST_PATH; add podSecurityContext

Author: Mladen Rusev

hack/e2e/test.sh

@@ -280,17 +280,7 @@ echo "Waiting for the helper pod to be ready..."
 kubectl wait --for=condition=Ready pod/coverage-helper-pod -n venafi --timeout=2m
 
 echo "Copying coverage files from the helper pod..."
-mkdir -p /home/runner/work/jetstack-secure/jetstack-secure/_bin/artifacts
-#mkdir -p $COVERAGE_HOST_PATH
-# We copy from the helper pod's mount path.
-kubectl cp -n venafi "coverage-helper-pod:/coverage-data/." /home/runner/work/jetstack-secure/jetstack-secure/_bin/artifacts
-
+mkdir -p $COVERAGE_HOST_PATH
+kubectl cp -n venafi "coverage-helper-pod:/coverage-data/." $COVERAGE_HOST_PATH
 echo "Coverage files retrieved. Listing contents:"
-#ls -la $COVERAGE_HOST_PATH
-ls -la /home/runner/work/jetstack-secure/jetstack-secure/_bin/artifacts
-
-# --- MANDATORY CLEANUP ---
-#echo "Cleaning up helper pod and PersistentVolumeClaim..."
-#kubectl delete pod coverage-helper-pod -n venafi
-#kubectl delete pvc coverage-pvc -n venafi
-#echo "Cleanup complete."
+ls -la $COVERAGE_HOST_PATH

hack/e2e/values.coverage-pvc.yaml

@@ -1,8 +1,9 @@
+podSecurityContext:
+  fsGroup: 2000
 volumes:
   - name: coverage-storage
     persistentVolumeClaim:
       claimName: coverage-pvc
-
 volumeMounts:
   - name: coverage-storage
     mountPath: /coverage

make/02_mod.mk

@@ -52,8 +52,8 @@ shared_generate_targets += generate-crds-venconn
 ## See `hack/e2e/test.sh` for the full test script.
 ## @category Testing
 test-e2e-gke: | $(NEEDS_HELM) $(NEEDS_STEP) $(NEEDS_VENCTL)
-	#COVERAGE_HOST_PATH="$(COVERAGE_HOST_PATH)" ./hack/e2e/test.sh
-	./hack/e2e/test.sh
+	COVERAGE_HOST_PATH="$(COVERAGE_HOST_PATH)" ./hack/e2e/test.sh
+	#./hack/e2e/test.sh
 
 .PHONY: test-helm
 ## Run `helm unittest`.