Merge pull request #385 from chaitanya1731/tests

tests: Decouple DSA workload artifacts

Author: uMartinXu

security/dsa_rbac.yaml

@@ -0,0 +1,17 @@
+# Copyright (c) 2025 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: intel-dsa
+  namespace: intel-dsa
+rules:
+- apiGroups:
+  - security.openshift.io
+  resources:
+  - securitycontextconstraints
+  resourceNames:
+  - intel-dsa-scc
+  verbs:
+  - use

security/dsa_role.yaml

@@ -0,0 +1,15 @@
+# Copyright (c) 2025 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: intel-dsa
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: intel-dsa
+subjects:
+- kind: ServiceAccount
+  name: intel-dsa
+  namespace: intel-dsa

security/dsa_roleBinding.yaml

@@ -0,0 +1,8 @@
+# Copyright (c) 2025 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: intel-dsa
+  namespace: intel-dsa

security/dsa_serviceAccount.yaml

@@ -6,6 +6,7 @@ This workload runs [accel-config](https://github.com/intel/idxd-config) sample t
 Please replace the credentials in buildconfig yaml with your RedHat account login credentials. 
 
 ```
+$ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/tests/l2/dsa/dsa_imagestream.yaml 
 $ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/tests/l2/dsa/dsa_build.yaml 
 ```
 
@@ -15,10 +16,12 @@ $ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-
 $ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/security/dsa_scc.yaml
 ```
       
-* Create the intel-dsa service account to use intel-dsa-scc
+* Create the intel-dsa serviceAccount, role and roleBinding to use intel-dsa-scc
 
 ```
-$ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/security/dsa_rbac.yaml
+$ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/security/dsa_serviceAccount.yaml
+$ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/security/dsa_role.yaml
+$ oc apply -f https://raw.githubusercontent.com/intel/intel-technology-enabling-for-openshift/main/security/dsa_roleBinding.yaml
 ```
 
 * Deploy the accel-config workload job with intel-dsa service account

tests/l2/dsa/README.md

@@ -1,13 +1,6 @@
 # Copyright (c) 2024 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
-apiVersion: image.openshift.io/v1
-kind: ImageStream
-metadata:
-  name: intel-dsa-workload
-  namespace: intel-dsa
-spec: {}
----
 apiVersion: build.openshift.io/v1
 kind: BuildConfig
 metadata:
@@ -53,7 +46,6 @@ spec:
               secretKeyRef:
                 key: password
                 name: rh-auth
-
   output:
     to:
       kind: ImageStreamTag

tests/l2/dsa/dsa_build.yaml

@@ -0,0 +1,8 @@
+# Copyright (c) 2025 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: image.openshift.io/v1
+kind: ImageStream
+metadata:
+  name: intel-dsa-workload
+  namespace: intel-dsa