# RBAC for ARC runner pods — allows integration tests to create
# ephemeral namespaces and deploy sandbox infrastructure.
# The service account is auto-created by the ARC runner scale set chart.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: arc-runner-inttest
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: self-hosted-gremlin-gha-rs-no-permission
    namespace: arc-system