feat: Add RBAC rules for Kubernetes Deployment tests

chart/README.md

@@ -93,6 +93,7 @@ Kubernetes native, multi-tenant synthetic monitoring system
 | serviceAccount.rbac.exec | bool | `true` |  |
 | serviceAccount.rbac.ingressCreateAndDelete | bool | `true` | for pod canary |
 | serviceAccount.rbac.namespaceCreateAndDelete | bool | `true` | for namespace canary |
+| serviceAccount.rbac.deploymentCreateAndDelete | bool | `true` | for deployment canary |
 | serviceAccount.rbac.podsCreateAndDelete | bool | `true` | for pod and junit canaries |
 | serviceAccount.rbac.readAll | bool | `true` | for use with kubernetes resource lookups |
 | serviceAccount.rbac.secrets | bool | `true` | for secret management with valueFrom |

chart/ci/full-values.yaml

@@ -73,6 +73,7 @@ serviceAccount:
     exec: true
     ingressCreateAndDelete: true
     namespaceCreateAndDelete: true
+    deploymentCreateAndDelete: true
     podsCreateAndDelete: true
     readAll: true
     secrets: true

chart/templates/rbac.yaml

@@ -104,6 +104,20 @@ rules:
     verbs:
       - "*"
   {{- end}}
+  {{- if .Values.serviceAccount.rbac.deploymentCreateAndDelete }}
+  - apiGroups:
+      - "apps"
+    resources:
+      - deployments
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  {{- end }}
   {{- if .Values.serviceAccount.rbac.extra }}
   {{ .Values.serviceAccount.rbac.extra | toYaml | nindent 2 }}
   {{- end}}

chart/values.schema.deref.json

@@ -4471,6 +4471,12 @@
               "title": "namespaceCreateAndDelete",
               "type": "boolean"
             },
+            "deploymentCreateAndDelete": {
+              "default": true,
+              "description": "for deployment canary",
+              "title": "deploymentCreateAndDelete",
+              "type": "boolean"
+            },
             "podsCreateAndDelete": {
               "default": true,
               "description": "for pod and junit canaries",
@@ -4508,7 +4514,8 @@
             "podsCreateAndDelete",
             "exec",
             "ingressCreateAndDelete",
-            "namespaceCreateAndDelete"
+            "namespaceCreateAndDelete",
+            "deploymentCreateAndDelete"          
           ],
           "title": "rbac"
         }

chart/values.schema.json

@@ -527,6 +527,13 @@
               "title": "namespaceCreateAndDelete",
               "type": "boolean"
             },
+            "deploymentCreateAndDelete": {
+              "default": true,
+              "description": "for deployment canary",
+              "required": [],
+              "title": "deploymentCreateAndDelete",
+              "type": "boolean"
+            },
             "podsCreateAndDelete": {
               "default": true,
               "description": "for pod and junit canaries",
@@ -564,7 +571,8 @@
             "podsCreateAndDelete",
             "exec",
             "ingressCreateAndDelete",
-            "namespaceCreateAndDelete"
+            "namespaceCreateAndDelete",
+            "deploymentCreateAndDelete"
           ],
           "title": "rbac"
         }

chart/values.yaml

@@ -430,6 +430,9 @@ serviceAccount:
     # -- for namespace canary
     namespaceCreateAndDelete: true
 
+    # -- for deployment canary
+    deploymentCreateAndDelete: true
+
     # @schema
     # required: false
     # default: []