-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
ACM 2.15.0
Description of problem:
Fine-grained RBAC users do not have permission to see PersistentVolumeClaims in search results, disabling part of the Fleet Virtualization UI.
Version-Release number of selected component (if applicable):
ACM 2.15.0
How reproducible:
Always
Steps to Reproduce:
- Enable fine-grained RBAC
- Create a user that has kubevirt.io:view and/or kubevirt.io-acm-managed:view for some clusters with VMs via ClusterPermission
- View the Fleet Virtualization VM list
- Enable the Storage class column
Actual results:
Storage class column is empty. Advanced search has no options under Storage class.

Expected results:
Fine-grained RBAC user should see same data as kube:admin in this case.
Additional info:
Ultimately this permission should be granted by making the fine-grained RBAC more generic and applying it to the kubevirt.io-acm-managed:view ClusterRole which includes permission to view PersistentVolumeClaims. As a temporary solution, we can add this permission to the hardcoded list included when the kubevirt.io:view role is detected.