fix(chart): bump appVersion to 1.7.6 and add kubevirt RBAC (#883)

Chart.yaml pinned appVersion/image to 1.5.7 while the templates render flags
(--auth-oidc-scopes, --timeline-retention, --timeline-max-size) that only exist
in 1.7.x binaries. Installing with chart defaults pulls the 1.5.7 image, which
rejects those flags, prints usage, and never becomes ready. Bump appVersion and
the artifacthub image annotation to 1.7.6 to match the templates.

Also add a kubevirt crdGroup (kubevirt.io + cdi/clone/export/instancetype/
migrations/pool/snapshot sub-APIs), defaulted on like the other CRD groups, so
the resource browser and topology can read KubeVirt VMs instead of spamming
forbidden-watch errors on clusters running KubeVirt.

Author: mattmattox

deploy/helm/radar/Chart.yaml

@@ -3,7 +3,7 @@ name: radar
 description: Modern Kubernetes visibility - topology, traffic, Helm and GitOps management
 type: application
 version: 1.5.10
-appVersion: "1.5.7"
+appVersion: "1.7.6"
 icon: https://radarhq.io/radar/icon-512.png
 keywords:
   - kubernetes
@@ -38,7 +38,7 @@ annotations:
       url: https://radarhq.io/community/chat
   artifacthub.io/images: |
     - name: radar
-      image: ghcr.io/skyhook-io/radar:1.5.7
+      image: ghcr.io/skyhook-io/radar:1.7.6
   artifacthub.io/screenshots: |
     - title: Multi-cluster topology
       url: https://github.com/skyhook-io/radar/raw/main/docs/screenshots/topology-view.png

deploy/helm/radar/templates/clusterrole.yaml

@@ -319,6 +319,11 @@ rules:
     resources: ["*"]
     verbs: ["get", "list", "watch"]
   {{- end }}
+  {{- if .Values.rbac.crdGroups.kubevirt }}
+  - apiGroups: ["kubevirt.io", "cdi.kubevirt.io", "clone.kubevirt.io", "export.kubevirt.io", "instancetype.kubevirt.io", "migrations.kubevirt.io", "pool.kubevirt.io", "snapshot.kubevirt.io"]
+    resources: ["*"]
+    verbs: ["get", "list", "watch"]
+  {{- end }}
   {{- if .Values.rbac.crdGroups.kured }}
   - apiGroups: ["kured.io"]
     resources: ["*"]

deploy/helm/radar/values.yaml

@@ -145,6 +145,7 @@ rbac:
     keda: true              # keda.sh
     knative: true           # serving.knative.dev, eventing.knative.dev, sources/messaging/flows/networking.internal.knative.dev
     kubeshark: true         # kubeshark.io
+    kubevirt: true          # kubevirt.io (VirtualMachines/VMIs) + cdi/clone/export/instancetype/migrations/pool/snapshot.kubevirt.io
     kured: true             # kured.io
     kyverno: true           # kyverno.io, wgpolicyk8s.io, reports.kyverno.io, openreports.io
     mariadb: true           # mariadb.mmontes.io