Merged
Conversation
…es-without-waiting
Update applications.vue
Introduce client-side RBAC support and apply it across the Epinio dashboard. Add utils/permissions.ts to build a flat permission map from /api/v1/me roles, and new EpinioMe/EpinioRole types. Extend the epinio store with a me action, permissions state, a can getter helper, and related mutations/reset. Fetch /me on relevant pages (namespaces, applications) and conditionally show Create buttons only when appropriate permissions are present (with sensible defaults while permissions are not yet loaded). Update resource models (applications, namespaces, services, configurations) to filter available actions based on the can getter and prune orphaned dividers for application actions. Overall this enforces UI-level RBAC while still relying on the API for authoritative enforcement.
Download zip server side
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.21.1 to 0.23.0. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@v0.21.1...v0.23.0) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Add Metrics Report Download Button
- config: isCreatable false for Configuration/Service; Create only when canCreateConfiguration/canCreateService - configurations.vue: masthead + RBAC-gated Create button - services.vue: strict canCreateService (hide when no service_write) - applications: gate shell by app_exec, Edit/ViewConfig by app_update and configuration_read/write - permissions: add configuration and service actions to role definitions - index.ts: markRaw for ThemeToggle and UnsavedChangesDialog (Vue warning fix)
- Hide "Edit Config" in view mode when user lacks configuration_write/configuration - Hide Shell action for users without app_exec (e.g. view_only) - Add .hide-edit-config CSS when button should be hidden.
- Build groupedByNamespace from all namespaces, not only those with apps - Load namespaces on applications page so empty namespaces get a table - Keeps UI consistent and avoids confusion that a namespace does not exist
- Always hide the primary "Edit Config" footer button in the applications edit dialog when the user lacks configuration write permissions, regardless of view vs edit mode. - Restrict the "Edit Config" menu action so it is only shown to users who have configuration write permissions. - Add a canEdit getter on the application model so the Resource Detail drawer only shows "Edit Config" when the user can actually modify configuration. - Tighten logic for the "Create Application" button so it is only shown when loaded permissions confirm the user has app create/write capabilities, keeping it hidden for view-only users.
Adds an Actions column to the Epinio instances table with an Install button that appears only for clusters where Epinio is not yet installed. Clicking the button opens an InstallDialog that collects domain, targetNamespace, and version, checks for an existing active install to prevent duplicates, creates an InstallEpinio CR on the target cluster via the Rancher K8s proxy, and polls the CR status conditions to show live progress (Progressing / Available / Degraded) until the operator completes the Helm-based install.
…-for-empty-ns show applications table for every namespace when empty
…-epinio add Install button to trigger Epinio install on unregistered clusters
…/sbom-action-0.23.0 chore(deps): bump anchore/sbom-action from 0.21.1 to 0.23.0
…/upload-artifact-7 chore(deps): bump actions/upload-artifact from 6 to 7
…/download-artifact-8 chore(deps): bump actions/download-artifact from 7 to 8
…setup-buildx-action-4 chore(deps): bump docker/setup-buildx-action from 3 to 4
chore(Cleanup and add automatically update the table upon install of …
Update data structure in configurations.js
…ing the showListMasthead set to false. ):
Add RBAC permissions and enforce UI actions
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merging in 1.13.10 to main.