mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-04 02:57:27 +09:00
## What this PR does Adds `discovery.k8s.io/endpointslices` read permissions (get, list, watch) to `cozy:tenant:base` and `cozy:tenant:view:base` ClusterRoles. Dashboard requests EndpointSlices to display the "Pod serving" section on the Service details page. Without this permission, tenant users see a 403 error. ### Release note ```release-note [system] Fix 403 error on Service details page by granting tenants read access to EndpointSlices ``` <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Enhanced system permission configurations to improve platform reliability and ensure proper access controls for core services. <!-- end of auto-generated comment: release notes by coderabbit.ai -->