Update chart tests

.github/integration/scripts/charts/dependencies.sh

@@ -75,3 +75,66 @@ yq -i '
 .global.sync.destination.secretKey = strenv(MINIO_SECRET) |
 .releasetest.secrets.accessToken = strenv(TEST_TOKEN)
 ' .github/integration/scripts/charts/values.yaml
+
+cat >rbac.json <<EOD
+{
+   "policy": [
+      {
+         "role": "admin",
+         "path": "/c4gh-keys/*",
+         "action": "(GET)|(POST)|(PUT)"
+      },
+      {
+         "role": "submission",
+         "path": "/file/ingest",
+         "action": "POST"
+      },
+            {
+         "role": "submission",
+         "path": "/file/accession",
+         "action": "POST"
+      },
+      {
+         "role": "submission",
+         "path": "/dataset/create",
+         "action": "POST"
+      },
+      {
+         "role": "submission",
+         "path": "/dataset/release/*dataset",
+         "action": "POST"
+      },
+      {
+         "role": "submission",
+         "path": "/users",
+         "action": "GET"
+      },
+      {
+         "role": "submission",
+         "path": "/users/:username/files",
+         "action": "GET"
+      },
+      {
+         "role": "*",
+         "path": "/files",
+         "action": "GET"
+      }
+   ],
+   "roles": [
+      {
+         "role": "admin",
+         "rolebinding": "submission"
+      },
+      {
+         "role": "[email protected]",
+         "rolebinding": "admin"
+      },
+      {
+         "role": "[email protected]",
+         "rolebinding": "admin"
+      }
+   ]
+}
+EOD
+
+kubectl create secret generic api-rbac --from-file="rbac.json"

.github/integration/scripts/charts/values.yaml

@@ -14,12 +14,9 @@ global:
     issuer: ""
     clusterIssuer: "cert-issuer"
   api:
-    adminsFileSecret:
-    adminUsers:
-      - [email protected]
-      - [email protected]
     jwtPubKeyName: jwt.pub
     jwtSecret: jwk
+    rbacFileSecret: api-rbac
   archive:
     storageType: s3
     s3AccessKey: PLACEHOLDER_VALUE