@@ -57,8 +57,9 @@ subjects:
5757 namespace: test-namespace
5858 `
5959
60- saName = "test-serviceaccount"
61- ns = "test-namespace"
60+ saName = "test-serviceaccount"
61+ ns = "test-namespace"
62+ testServiceAccount = user.DefaultInfo {Name : fmt .Sprintf ("system:serviceaccount:%s:%s" , ns , saName )}
6263
6364 objects = []client.Object {
6465 & corev1.Namespace {
@@ -150,7 +151,6 @@ func TestPreAuthorize_Success(t *testing.T) {
150151 featuregatetesting .SetFeatureGateDuringTest (t , features .OperatorControllerFeatureGate , features .PreflightPermissions , true )
151152 fakeClient := setupFakeClient (privilegedClusterRole )
152153 preAuth := NewRBACPreAuthorizer (fakeClient )
153- testServiceAccount := user.DefaultInfo {Name : fmt .Sprintf ("system:serviceaccount:%s:%s" , ns , saName )}
154154 missingRules , err := preAuth .PreAuthorize (context .TODO (), & testServiceAccount , strings .NewReader (testManifest ))
155155 require .NoError (t , err )
156156 require .Equal (t , []ScopedPolicyRules {}, missingRules )
@@ -162,7 +162,6 @@ func TestPreAuthorize_Failure(t *testing.T) {
162162 featuregatetesting .SetFeatureGateDuringTest (t , features .OperatorControllerFeatureGate , features .PreflightPermissions , true )
163163 fakeClient := setupFakeClient (limitedClusterRole )
164164 preAuth := NewRBACPreAuthorizer (fakeClient )
165- testServiceAccount := user.DefaultInfo {Name : fmt .Sprintf ("system:serviceaccount:%s:%s" , ns , saName )}
166165 missingRules , err := preAuth .PreAuthorize (context .TODO (), & testServiceAccount , strings .NewReader (testManifest ))
167166 require .Error (t , err )
168167 require .NotEqual (t , []ScopedPolicyRules {}, missingRules )
@@ -174,7 +173,6 @@ func TestPreAuthorize_CheckEscalation(t *testing.T) {
174173 featuregatetesting .SetFeatureGateDuringTest (t , features .OperatorControllerFeatureGate , features .PreflightPermissions , true )
175174 fakeClient := setupFakeClient (escalatingClusterRole )
176175 preAuth := NewRBACPreAuthorizer (fakeClient )
177- testServiceAccount := user.DefaultInfo {Name : fmt .Sprintf ("system:serviceaccount:%s:%s" , ns , saName )}
178176 missingRules , err := preAuth .PreAuthorize (context .TODO (), & testServiceAccount , strings .NewReader (testManifest ))
179177 require .NoError (t , err )
180178 require .Equal (t , []ScopedPolicyRules {}, missingRules )
0 commit comments