From a7a80a7628d9f6916328d1ecd2d6ca972ba4f18b Mon Sep 17 00:00:00 2001 From: Kirill Ilin Date: Thu, 26 Mar 2026 16:25:18 +0500 Subject: [PATCH] fix(dashboard): grant read access to storageclasses for authenticated users The dashboard UI fetches StorageClasses via the Kubernetes API to populate dropdowns (e.g. in the Postgres form), but the cozystack-dashboard-readonly ClusterRole did not include storage.k8s.io/storageclasses. This caused authenticated users to see "Error" instead of the StorageClass name. Add get/list/watch permissions for storageclasses to the dashboard readonly role, consistent with the existing backupclasses entry. Assisted-By: Claude AI Signed-off-by: Kirill Ilin --- packages/system/dashboard/templates/rbac.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/packages/system/dashboard/templates/rbac.yaml b/packages/system/dashboard/templates/rbac.yaml index 6dcb5da5..eb687a3e 100644 --- a/packages/system/dashboard/templates/rbac.yaml +++ b/packages/system/dashboard/templates/rbac.yaml @@ -20,6 +20,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - storageclasses + verbs: + - get + - list + - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding