## What this PR does Adds `discovery.k8s.io/endpointslices` read permissions (get, list, watch) to `cozy:tenant:base` and `cozy:tenant:view:base` ClusterRoles. Dashboard requests EndpointSlices to display the "Pod serving" section on the Service details page. Without this permission, tenant users see a 403 error. ### Release note ```release-note [system] Fix 403 error on Service details page by granting tenants read access to EndpointSlices ``` <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Enhanced system permission configurations to improve platform reliability and ensure proper access controls for core services. <!-- end of auto-generated comment: release notes by coderabbit.ai --> |
||
|---|---|---|
| .. | ||
| clusterroles.yaml | ||
| cozy-public.yaml | ||
| cozystack-values-secret.yaml | ||
| dashboard-role.yaml | ||
| monitoring-external-services.yaml | ||
| tenant-root.yaml | ||