Skip to content

feat(frontend): add componentversions RBAC permissions to cluster-version-reader#6121

Open
Copilot wants to merge 1 commit into
mainfrom
copilot/add-clusterrole-to-version-reader
Open

feat(frontend): add componentversions RBAC permissions to cluster-version-reader#6121
Copilot wants to merge 1 commit into
mainfrom
copilot/add-clusterrole-to-version-reader

Conversation

Copilot AI commented Oct 26, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

The cluster-version-reader ClusterRole lacks permissions for componentversions resources in the apps.kubeblocks.io apiGroup, preventing the dbprovider frontend from querying component version information.

Changes

Added RBAC rule to frontend/providers/dbprovider/deploy/manifests/rbac.yaml:

- apiGroups: ['apps.kubeblocks.io']
  resources: ['componentversions']
  verbs: ['get', 'watch', 'list']

This grants the cluster-version-reader service account read-only access to componentversions, consistent with existing permissions for clusterversions and other KubeBlocks resources.

Original prompt

This section details on the original issue you should resolve

<issue_title>frontend cluster-version-reader miss clusterrole</issue_title>
<issue_description>kubectl edit clusterrole cluster-version-reader need add clusterrole

- apiGroups:
  - apps.kubeblocks.io
  resources:
  - componentversions
  verbs:
  - get
  - list
  - watch```</issue_description>

<agent_instructions>看我的frontend调整配置</agent_instructions>

## Comments on the Issue (you are @copilot in this section)

<comments>
</comments>

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

@cuisongliu cuisongliu added this to the v5.1 milestone Oct 26, 2025
Copilot AI changed the title [WIP] Add missing clusterrole for cluster-version-reader feat(frontend): add componentversions RBAC permissions to cluster-version-reader Oct 26, 2025
Copilot AI requested a review from cuisongliu October 26, 2025 02:54
@cuisongliu cuisongliu requested a review from zjy365 October 26, 2025 02:55
@cuisongliu cuisongliu marked this pull request as ready for review October 26, 2025 02:55
@cuisongliu cuisongliu requested a review from a team as a code owner October 26, 2025 02:55
@cuisongliu cuisongliu added this to kb0.9 Oct 26, 2025
@cuisongliu cuisongliu moved this to Ready in kb0.9 Oct 26, 2025
@cuisongliu cuisongliu modified the milestones: v5.1, v5.2 Nov 3, 2025
@cuisongliu cuisongliu force-pushed the copilot/add-clusterrole-to-version-reader branch 3 times, most recently from 0d47131 to caf4c65 Compare November 8, 2025 05:38
@cuisongliu
feat(frontend): add componentversions permissions to cluster-version-…
6e5ad62 
…reader

Co-authored-by: cuisongliu <4150905+cuisongliu@users.noreply.github.com>
@cuisongliu cuisongliu force-pushed the copilot/add-clusterrole-to-version-reader branch from caf4c65 to 6e5ad62 Compare December 10, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zjy365 zjy365 Awaiting requested review from zjy365

1 more reviewer

@cuisongliu cuisongliu cuisongliu approved these changes

Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

@cuisongliu cuisongliu

Copilot code review Copilot

Labels

area/frontend size/XS

Projects

kb0.9
Status: Ready

Milestone

v5.2

Development

Successfully merging this pull request may close these issues.

frontend cluster-version-reader miss clusterrole

2 participants

@cuisongliu