Skip to content

Commit cedca6e

Browse files
committed
Add string docs for RBAC read-only testing
Signed-off-by: Katyanna Moura <[email protected]>
1 parent a644c80 commit cedca6e

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

test/e2e/authorization.go

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,10 @@ var _ = g.Describe("Authorization [RBAC] [Zalando]", func() {
130130
})
131131
})
132132

133+
// NOTE: The read-only role is restricted by RBAC to non-mutating operations.
134+
// Such requests bypass the admission controller, which only processes
135+
// mutating requests. Admission controller tests for this role are unnecessary,
136+
// as access control is fully enforced at the RBAC authorization stage.
133137
g.Context("For ReadOnly group", func() {
134138
var tc testCase
135139
g.BeforeEach(func() {

0 commit comments

Comments
 (0)