[PR] [269] Fix broken CI/CD tests due to Minikube w/ K8s 1.17.0 + RBAC

[kopf-archiver]

A pull request by nolar at 2019-12-12 12:22:47+00:00
Original URL: zalando-incubator/kopf#270
Merged by nolar at 2019-12-12 13:00:16+00:00

Issue : #269

Description

Minikube is broken with K8s 1.17.0+RBAC. The related Minikube issue is linked in #269.

Authorization is changed from "RBAC" to "Node,RBAC". This PR will allow us to continue with the development.

Originally, RBAC-only mode was enabled to ensure that the operators are runnable in our RBAC-only environment, and the default Kubernetes authorization mode "Node,RBAC" was false-positive in some cases (back then in ~Apr'2019), so the issues were noticed only during the deployments to a RBAC-only environment.

By disabling this mode, we can get those false-positive test results again (RBAC-related). But this is the only way to make it run in CI/CD.

PS: "False-positives" in this cases means that something can be actually broken for the RBAC-only environment, but the tests do not detect this due to "Node,RBAC" mode, and report the successes.

Types of Changes

• Bug fix (non-breaking change which fixes an issue)
• Configuration change