From ef8612e88252a552f1fb847d742b1c5d13f32b89 Mon Sep 17 00:00:00 2001 From: Timofei Larkin Date: Mon, 17 Nov 2025 19:00:35 +0300 Subject: [PATCH] [vpc] Fix access to subnet details configmap ## What this PR does The VPC chart incorrectly used the wrong template for the subjects that should have access to the configmap info resource. This patch grants this access to all subjects at or above a certain access level, rather than just at a specific level. ### Release note ```release-note [vpc] Grant read access to the subnets configmap to all users inside a tenant. ``` Signed-off-by: Timofei Larkin --- packages/apps/vpc/templates/vpc.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/apps/vpc/templates/vpc.yaml b/packages/apps/vpc/templates/vpc.yaml index 247d4821..eb113b4f 100644 --- a/packages/apps/vpc/templates/vpc.yaml +++ b/packages/apps/vpc/templates/vpc.yaml @@ -75,7 +75,7 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: "{{ .Release.Name }}-subnets" -subjects: {{- include "cozy-lib.rbac.subjectsForTenant" (list "view" .Release.Namespace ) | nindent 2 }} +subjects: {{- include "cozy-lib.rbac.subjectsForTenantAndAccessLevel" (list "view" .Release.Namespace ) | nindent 2 }} roleRef: kind: Role name: "{{ .Release.Name }}-subnets"