Test role bindings in fixture sets

lib/kubernetes-deploy/kubeclient_builder.rb

@@ -76,6 +76,14 @@ def build_autoscaling_v1_kubeclient(context)
       )
     end
 
+    def build_rbac_v1beta1_kubeclient(context)
+      _build_kubeclient(
+        api_version: "v1",
+        context: context,
+        endpoint_path: "/apis/rbac.authorization.k8s.io"
+      )
+    end
+
     def _build_kubeclient(api_version:, context:, endpoint_path: nil)
       # Find a context defined in kube conf files that matches the input context by name
       friendly_configs = config_files.map { |f| GoogleFriendlyConfig.read(f) }

test/helpers/fixture_set.rb

@@ -144,6 +144,12 @@ def assert_service_account_present(name)
       assert desired.present?, "Service account #{name} does not exist"
     end
 
+    def assert_role_binding_present(name)
+      role_bindings = rbac_v1beta1_kubeclient.get_role_bindings(namespace: namespace)
+      desired = role_bindings.find { |sa| sa.metadata.name == name }
+      assert desired.present?, "Role binding #{name} does not exist"
+    end
+
     def assert_annotated(obj, annotation)
       annotations = obj.metadata.annotations.to_h.stringify_keys
       assert annotations.key?(annotation), "Expected secret to have annotation #{annotation}, but it did not"

test/helpers/fixture_sets/hello_cloud.rb

@@ -15,6 +15,7 @@ def assert_all_up
       assert_poddisruptionbudget
       assert_bare_replicaset_up
       assert_all_service_accounts_up
+      assert_all_role_bindings_up
       assert_daemon_set_up
       assert_stateful_set_up
       assert_job_up
@@ -88,6 +89,10 @@ def assert_all_service_accounts_up
       assert_service_account_present("build-robot")
     end
 
+    def assert_all_role_bindings_up
+      assert_role_binding_present("role-binding")
+    end
+
     def assert_daemon_set_up
       assert_daemon_set_present("ds-app")
     end

test/helpers/kubeclient_helper.rb

@@ -37,4 +37,8 @@ def apiextensions_v1beta1_kubeclient
   def autoscaling_v1_kubeclient
     @autoscaling_v1_kubeclient ||= build_autoscaling_v1_kubeclient(MINIKUBE_CONTEXT)
   end
+
+  def rbac_v1beta1_kubeclient
+    @rbac_v1beta1_kubeclient ||= build_rbac_v1beta1_kubeclient(TEST_CONTEXT)
+  end
 end

test/integration/kubernetes_deploy_test.rb

@@ -61,6 +61,7 @@ def test_role_binding_predeployed_before_unmanaged_pod
     hello_cloud = FixtureSetAssertions::HelloCloud.new(@namespace)
     hello_cloud.assert_configmap_data_present
     hello_cloud.assert_all_service_accounts_up
+    hello_cloud.assert_all_role_bindings_up
     hello_cloud.assert_unmanaged_pod_statuses("Succeeded")
     assert_logs_match_all([
       %r{Successfully deployed in \d.\ds: RoleBinding/role-binding},