Updated the namespace-scoped Role/autocoder-engine-ci in namespace autocoder-engine from the repository-managed manifest:
KUBECONFIG=/etc/kubernetes/admin.conf kubectl apply -f /home/ax_julian/AutoCoder-Engine/k8s/07-ci-deployer-rbac.yaml
The AutoCoder Engine deploy workflow failed during Reconcile repository-managed HTTP manifest because the CI service account could update existing objects but could not create the newly split frontend Deployment/codecartography-frontend and Service/codecartography-frontend.
ServiceAccount/autocoder-engine-ci now has the repository-defined create/patch/update permissions for namespaced Deployments, Services, and Ingresses required by the split backend/frontend deploy workflow.
Verified with:
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i create deployments.apps --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i patch deployments.apps --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i create services --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i patch services --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i create ingresses.networking.k8s.io --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
KUBECONFIG=/etc/kubernetes/admin.conf kubectl -n autocoder-engine auth can-i patch ingresses.networking.k8s.io --as=system:serviceaccount:autocoder-engine:autocoder-engine-ci
All checks returned yes.