From becf8d757296819e90d35850c592a35619b5729d Mon Sep 17 00:00:00 2001
From: IvanHunters <ivan.okhotnikov@aenix.io>
Date: Wed, 29 Apr 2026 23:28:53 +0300
Subject: [PATCH] fix(dashboard): complete migration to cozy-dashboard naming
 and fix RBAC

- Rename ClusterRoleBinding and update ServiceAccount references
- Update FlowSchema to use new cozy-dashboard-console service account
- Add core.cozystack.io permissions for tenant resources

Signed-off-by: IvanHunters <ivan.okhotnikov@aenix.io>
---
 .../templates/clusterrolebinding-cluster-view.yaml     |  6 +++---
 packages/system/dashboard/templates/flowschema.yaml    |  2 +-
 packages/system/dashboard/templates/rbac.yaml          | 10 ++++++++++
 3 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/packages/system/dashboard/templates/clusterrolebinding-cluster-view.yaml b/packages/system/dashboard/templates/clusterrolebinding-cluster-view.yaml
index 43d20f57..9f68369b 100644
--- a/packages/system/dashboard/templates/clusterrolebinding-cluster-view.yaml
+++ b/packages/system/dashboard/templates/clusterrolebinding-cluster-view.yaml
@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: incloud-web-cluster-view
+  name: cozy-dashboard-cluster-view
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: view
 subjects:
   - kind: ServiceAccount
-    name: incloud-web-web
-    namespace: incloud-web
+    name: cozy-dashboard-console
+    namespace: {{ .Release.Namespace }}
diff --git a/packages/system/dashboard/templates/flowschema.yaml b/packages/system/dashboard/templates/flowschema.yaml
index 9304fb44..071055bd 100644
--- a/packages/system/dashboard/templates/flowschema.yaml
+++ b/packages/system/dashboard/templates/flowschema.yaml
@@ -10,7 +10,7 @@ spec:
     - subjects:
         - kind: ServiceAccount
           serviceAccount:
-            name: incloud-web-web
+            name: cozy-dashboard-console
             namespace: {{ .Release.Namespace }}
       resourceRules:
         - verbs: ["*"]
diff --git a/packages/system/dashboard/templates/rbac.yaml b/packages/system/dashboard/templates/rbac.yaml
index b5d2b642..b37a68b2 100644
--- a/packages/system/dashboard/templates/rbac.yaml
+++ b/packages/system/dashboard/templates/rbac.yaml
@@ -12,6 +12,16 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - core.cozystack.io
+  resources:
+  - tenantmodules
+  - tenantnamespaces
+  - tenantsecrets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - dashboard.cozystack.io
   resources: