examples: setting RAMIdentityMapping for test

AliyunContainerService · Jan 9, 2024 · dc955b9 · dc955b9
1 parent 7671f4a
commit dc955b9
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/examples/credential-plugin/e2e.sh b/examples/credential-plugin/e2e.sh
@@ -17,19 +17,36 @@ function get_kubeconfig() {
   bar_tip "get kubeconfig"
 
   ack-ram-tool credential-plugin get-kubeconfig -m ${MODE} --cluster-id ${CLUSTER_ID} > ${KUBECONFIG_PATH}
+
+  if echo ${MODE} |grep token; then
+    Arn=$(aliyun sts GetCallerIdentity | jq .Arn -r)
+    UserId=$(aliyun sts GetCallerIdentity | jq .UserId -r)
+    ack-ram-tool credential-plugin get-kubeconfig --cluster-id ${CLUSTER_ID} > ${KUBECONFIG_PATH}.crt.yaml
+    cat <<EOF | kubectl --kubeconfig=${KUBECONFIG_PATH}.crt.yaml apply -f -
+apiVersion: ramauthenticator.k8s.alibabacloud/v1alpha1
+kind: RAMIdentityMapping
+metadata:
+  name: "${UserId}"
+spec:
+  arn: ${Arn}
+  username: "${UserId}"
+EOF
+  fi
 }
 
 function exec_auth() {
   bar_tip "exec auth plugin"
 
   kubectl --kubeconfig=${KUBECONFIG_PATH} get ns
+  kubectl --kubeconfig=${KUBECONFIG_PATH} auth whoami
 }
 
 function cleanup() {
   set +e
   bar_tip "cleanup"
 
   rm ${KUBECONFIG_PATH}
+  rm ${KUBECONFIG_PATH}.crt.yaml
   rm ${CACHE_DIR}/*
   rm -r ${CACHE_DIR}