jenkins: run titan-iac glue tests with jenkins SA and vm fqdn

Jenkinsfile

@@ -7,6 +7,7 @@ pipeline {
 apiVersion: v1
 kind: Pod
 spec:
+  serviceAccountName: "jenkins"
   nodeSelector:
     hardware: rpi5
     kubernetes.io/arch: arm64
@@ -25,6 +26,7 @@ spec:
     PYTHONUNBUFFERED = '1'
     SUITE_NAME = 'titan-iac'
     PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091'
+    VM_URL = 'http://victoria-metrics-single-server.monitoring.svc.cluster.local:8428'
   }
   stages {
     stage('Checkout') {

ci/Jenkinsfile.titan-iac

@@ -6,6 +6,7 @@ pipeline {
 apiVersion: v1
 kind: Pod
 spec:
+  serviceAccountName: "jenkins"
   nodeSelector:
     hardware: rpi5
     kubernetes.io/arch: arm64
@@ -24,6 +25,7 @@ spec:
     PYTHONUNBUFFERED = '1'
     SUITE_NAME = 'titan-iac'
     PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091'
+    VM_URL = 'http://victoria-metrics-single-server.monitoring.svc.cluster.local:8428'
   }
   stages {
     stage('Checkout') {

services/jenkins/serviceaccount.yaml

@@ -39,3 +39,28 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: jenkins-agent
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: jenkins-glue-observer
+rules:
+  - apiGroups: ["batch"]
+    resources:
+      - cronjobs
+    verbs: ["get", "list", "watch"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: jenkins-glue-observer
+subjects:
+  - kind: ServiceAccount
+    name: jenkins
+    namespace: jenkins
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: jenkins-glue-observer