fix(dashboard): complete migration to cozy-dashboard naming and fix RBAC

- Rename ClusterRoleBinding and update ServiceAccount references
- Update FlowSchema to use new cozy-dashboard-console service account
- Add core.cozystack.io permissions for tenant resources

Signed-off-by: IvanHunters <ivan.okhotnikov@aenix.io>

packages/system/dashboard/templates/clusterrolebinding-cluster-view.yaml

@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: incloud-web-cluster-view
+  name: cozy-dashboard-cluster-view
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: view
 subjects:
   - kind: ServiceAccount
-    name: incloud-web-web
-    namespace: incloud-web
+    name: cozy-dashboard-console
+    namespace: {{ .Release.Namespace }}

packages/system/dashboard/templates/flowschema.yaml

@@ -10,7 +10,7 @@ spec:
     - subjects:
         - kind: ServiceAccount
           serviceAccount:
-            name: incloud-web-web
+            name: cozy-dashboard-console
             namespace: {{ .Release.Namespace }}
       resourceRules:
         - verbs: ["*"]

packages/system/dashboard/templates/rbac.yaml

@@ -12,6 +12,16 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - core.cozystack.io
+  resources:
+  - tenantmodules
+  - tenantnamespaces
+  - tenantsecrets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - dashboard.cozystack.io
   resources: