cozystack/packages/system/cozystack-basics/templates
Kirill Ilin 86595b99e4
[system] Fix tenant RBAC for endpointslices read access (#2257)
## What this PR does

Adds `discovery.k8s.io/endpointslices` read permissions (get, list,
watch) to `cozy:tenant:base` and `cozy:tenant:view:base` ClusterRoles.

Dashboard requests EndpointSlices to display the "Pod serving" section
on the Service details page. Without this permission, tenant users see a
403 error.

### Release note

```release-note
[system] Fix 403 error on Service details page by granting tenants read access to EndpointSlices
```

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Enhanced system permission configurations to improve platform
reliability and ensure proper access controls for core services.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-27 17:48:46 +05:00
..
clusterroles.yaml [system] Fix tenant RBAC for endpointslices read access (#2257) 2026-03-27 17:48:46 +05:00
cozy-public.yaml feat(flux): implement flux sharding for tenant HelmReleases 2026-01-15 14:15:09 +01:00
cozystack-values-secret.yaml [platform] Fix cozystack-values secret race 2026-02-10 19:21:52 +03:00
dashboard-role.yaml [rbac] Use hierarchical naming scheme 2026-02-11 18:19:26 +03:00
monitoring-external-services.yaml feat(monitoring): migrate VictoriaLogs from VLogs to VLCluster 2026-03-10 12:04:12 +05:00
tenant-root.yaml [cozystack-basics] Preserve existing HelmRelease values during reconciliations 2026-02-18 21:52:51 +05:00