Myasnikov Daniil a23341275c fix(dashboard): grant tenant dashboard read on cozy-public PVCs ...

The vm-disk source image dropdown in the console lists PersistentVolumeClaims in cozy-public (the vm-default-images-* golden images). The browser issues that list as the tenant identity (e.g. system:serviceaccount:tenant-root:tenant-root), but the cozy:tenant:dashboard Role only granted read on Flux helmrepositories and helmcharts. The list returned 403 and the dropdown stayed empty even when the images existed.

Add get/list/watch on persistentvolumeclaims to the Role. cozy-public is a shared public namespace, so read on its PVCs is safe to expose to every tenant dashboard subject. A helm-unittest regression pins the grant.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
(cherry picked from commit bb322138ec)

2026-06-09 20:52:03 +00:00

..

application-definition-crd

refactor(api): rename CozystackResourceDefinition to ApplicationDefinition

2026-01-15 22:35:56 +01:00

backup-controller

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

backupstrategy-controller

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

bootbox

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

bootbox-rd

[docs] Updated app go types

2026-03-25 15:57:25 +05:00

bucket

Prepare release v1.4.1

2026-05-22 04:10:56 +00:00

bucket-rd

fix(bucket): regenerate schema and docs from values.yaml annotations

2026-03-03 19:32:32 +03:00

capi-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

capi-providers-bootstrap

fix(cluster-api): fix kamaji OOM and set limits on unset providers

2026-05-21 10:14:40 +00:00

capi-providers-core

fix(cluster-api): fix kamaji OOM and set limits on unset providers

2026-05-21 10:14:40 +00:00

capi-providers-cpprovider

fix(cluster-api): fix kamaji OOM and set limits on unset providers

2026-05-21 10:14:40 +00:00

capi-providers-infraprovider

fix(cluster-api): fix kamaji OOM and set limits on unset providers

2026-05-21 10:14:40 +00:00

cert-manager

fix(cert-manager): bump chart to v1.20.2

2026-05-03 20:49:47 +05:00

cert-manager-crds

fix(cert-manager): bump chart to v1.20.2

2026-05-03 20:49:47 +05:00

cert-manager-issuers

fix(platform): migrate ACME HTTP-01 to ingressClassName API

2026-04-21 17:00:31 +05:00

cilium

Prepare release v1.4.0-rc.1

2026-05-13 12:29:01 +00:00

cilium-networkpolicy

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

clickhouse-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

clickhouse-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

cluster-autoscaler

feat(cluster-autoscaler): enable enforce-node-group-min-size by default

2026-02-14 11:42:52 +01:00

clustersecret-operator

Add clustersecret-operator system package

2026-02-10 22:47:20 +05:00

coredns

fix(coredns): sanitize Chart.Version build metadata in coredns-custom label

2026-05-07 16:45:36 +03:00

cozy-proxy

feat(cozy-proxy): bump to v0.3.0

2026-04-28 11:14:27 +02:00

cozystack-api

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

cozystack-basics

fix(dashboard): grant tenant dashboard read on cozy-public PVCs

2026-06-09 20:52:03 +00:00

cozystack-controller

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

cozystack-scheduler

feat(scheduler): storage-aware scheduling

2026-04-13 17:15:09 +03:00

dashboard

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

etcd-operator

chore(etcd-operator): update vendored chart to v0.4.3

2026-04-20 15:53:41 +03:00

etcd-rd

chore(etcd): regenerate values.schema.json and cozyrd manifest

2026-04-21 02:30:27 +03:00

external-dns

feat(extra): add external-dns as standalone extra package

2026-03-10 12:48:01 +01:00

external-dns-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

external-secrets-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

flux-plunger

fix(security): run first-party scratch images as non-root UID 65532

2026-04-26 03:45:14 +03:00

fluxcd

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

fluxcd-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

foundationdb-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

foundationdb-rd

feat(platform): add implementation of backup-strategy controller for foundationdb

2026-05-13 09:49:19 +04:00

gateway-api-crds

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

goldpinger

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

gpu-operator

test(gpu-operator): assert variant overlays render expected ClusterPolicy

2026-04-30 14:52:56 +03:00

grafana-operator

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

hami

chore(hami): document and partially automate vendor patches in Makefile

2026-04-29 11:14:41 +03:00

harbor

test(harbor): add helm-unittest coverage for bucket-secret guards

2026-04-30 16:40:26 +05:00

harbor-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

hetzner-robotlb

chore(hetzner-robotlb): update robotlb chart to appVersion 0.0.6

2026-04-23 16:57:23 +05:00

http-cache-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

info-rd

refactor(labels): remove cozystack.io/ui label

2026-01-19 13:59:29 +01:00

ingress-nginx

Replaced direct chart edits with patch files

2026-03-02 12:35:14 +05:00

ingress-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

kafka-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

kafka-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

kamaji

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

keycloak

feat(keycloak): support extraEnv values and userProfile customization (#2613)

2026-05-12 12:38:35 +02:00

keycloak-configure

chore(keycloak): use generic example values in chart comments

2026-05-12 13:13:19 +05:00

keycloak-operator

[keycloak-operator] Update to v1.32.0

2026-03-11 15:15:09 +03:00

kilo

build(kilo): pin patched image to cozystack registry

2026-05-11 20:33:28 +03:00

kubeovn

fix(kube-ovn): bump kube-ovn to v1.15.10 with port-group regression fix

2026-04-21 20:09:19 +02:00

kubeovn-plunger

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

kubeovn-webhook

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

kubernetes-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

kubevirt

fix(kubevirt): disable serial console log to fix VM pod initialization

2026-02-21 20:46:31 +01:00

kubevirt-cdi

feat(cdi): switch clone strategy to csi-clone

2026-03-10 12:42:01 +01:00

kubevirt-cdi-operator

[cdi-operator] Update to v1.64.0

2026-02-20 20:16:33 +01:00

kubevirt-csi-node

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

kubevirt-instancetypes

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

kubevirt-operator

fix(kubevirt-operator): move PrometheusRule to Helm-rendered template (#2543)

2026-05-04 20:38:44 +02:00

lineage-controller-webhook

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

linstor

Prepare release v1.4.1

2026-05-22 04:10:56 +00:00

linstor-gui

Prepare release v1.4.0-rc.1

2026-05-13 12:29:01 +00:00

linstor-scheduler

feat(scheduler): storage-aware scheduling

2026-04-13 17:15:09 +03:00

local-ccm

Update local-ccm v0.3.0

2026-02-10 20:19:03 +01:00

mariadb-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

mariadb-rd

feat(platform): implement backup strategy for mariadb

2026-05-12 13:56:29 +04:00

metallb

Prepare release v1.0.0-alpha.1

2026-01-15 23:32:41 +00:00

metrics-server

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

mongodb-operator

Fix pre-commit check

2026-01-20 03:24:32 +01:00

mongodb-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

monitoring

feat(monitoring): add GPU observability dashboards and recording rules (#2418)

2026-04-28 22:42:01 +03:00

monitoring-agents

fix(monitoring): prevent many-to-many match in util-per-watt recording rule

2026-04-28 11:21:12 +03:00

monitoring-rd

[docs] Updated app go types

2026-03-25 15:57:25 +05:00

multus

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

nats

Add monitoring for NATs

2026-02-17 22:54:12 +01:00

nats-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

nfs-driver

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

objectstorage-controller

fix(objectstorage-controller): propagate Bucket readiness to BucketClaim

2026-06-05 08:10:36 +00:00

openbao

feat(openbao): add system chart with vendored upstream

2026-02-17 20:03:01 +03:00

openbao-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

opencost

Fix pre-commit check

2026-01-20 03:24:32 +01:00

opensearch-operator

fix(opensearch-operator): use values.yaml override instead of patch

2026-05-20 14:01:47 +00:00

opensearch-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

ouroboros

feat(ouroboros): bump to v0.8.0

2026-06-05 12:25:22 +00:00

piraeus-operator

[piraeus-operator] Split LINSTOR controller availability and metrics alerts

2026-03-25 16:11:14 +03:00

piraeus-operator-crds

Move CRDs installation logic to piraeus-operator-crds chart

2026-02-11 22:54:56 +01:00

postgres-operator

docs(postgres-operator): fix backoffLimit/activeDeadlineSeconds comment math

2026-04-24 13:33:07 +03:00

postgres-rd

fix(postgres): drive postgresql.parameters int-or-string from the generator

2026-05-22 03:59:02 +00:00

prometheus-operator-crds

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

qdrant

[qdrant] Add Qdrant vector database application

2026-02-06 13:30:58 +03:00

qdrant-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

rabbitmq-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

rabbitmq-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

redis-operator

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

redis-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

reloader

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

seaweedfs

Prepare release v1.4.2

2026-05-28 01:41:38 +00:00

seaweedfs-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

snapshot-controller

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

tcp-balancer-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

telepresence

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

tenant-rd

[docs] Updated app go types

2026-03-25 15:57:25 +05:00

velero

fix(backups): move velero-configmap Role to velero chart

2026-04-23 10:41:41 +05:00

vertical-pod-autoscaler

Post upgrade fixes for v1.0 packagesources

2026-01-28 20:08:35 +03:00

vertical-pod-autoscaler-crds

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

victoria-metrics-operator

feat(monitoring): upgrade victoria-metrics-operator to v0.68.4

2026-04-20 15:48:53 +03:00

virtualprivatecloud-rd

[docs] Update cozyvalues-gen

2026-03-25 15:59:22 +05:00

vm-default-images

[vm-default-images] Default to replicated storageClass and document storage requirements

2026-04-14 19:59:20 +05:00

vm-disk-rd

[vm-disk] Fix vm-disk-rd

2026-04-14 19:59:19 +05:00

vm-instance-rd

[vm-instance] Add externalAllowICMP knob, drop in-PR changelog

2026-04-28 08:37:13 +02:00

vpn-rd

feat(apps): instance-type resourcesPreset across apps and extras

2026-05-11 21:08:41 +03:00

vsnap-crd

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00