Myasnikov Daniil bb322138ec fix(dashboard): grant tenant dashboard read on cozy-public PVCs ...

The vm-disk source image dropdown in the console lists PersistentVolumeClaims in cozy-public (the vm-default-images-* golden images). The browser issues that list as the tenant identity (e.g. system:serviceaccount:tenant-root:tenant-root), but the cozy:tenant:dashboard Role only granted read on Flux helmrepositories and helmcharts. The list returned 403 and the dropdown stayed empty even when the images existed.

Add get/list/watch on persistentvolumeclaims to the Role. cozy-public is a shared public namespace, so read on its PVCs is safe to expose to every tenant dashboard subject. A helm-unittest regression pins the grant.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-06-08 15:31:41 +05:00

..

clusterroles-options_test.yaml

test(cozystack-basics): pin tenant view grant on core.cozystack.io options

2026-06-02 18:20:51 +03:00

cozystack-values-secret_test.yaml

feat(gateway): align _namespace.gateway propagation with tenant.gatewayEffective

2026-05-25 17:07:02 +03:00

dashboard-role_test.yaml

fix(dashboard): grant tenant dashboard read on cozy-public PVCs

2026-06-08 15:31:41 +05:00

gateway-hostname-policy_test.yaml

feat(gateway): drop tenant-* ban on gateway-attached-namespaces

2026-05-25 19:00:31 +03:00

route-hostname-policy_test.yaml

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

tenant-root_test.yaml

feat(tenantgateway): switch Gateway allowedRoutes to label selector

2026-05-25 18:32:20 +03:00