Snapshots tab is missing for cluster owner that is a standard user

[timhaneunsoo]

Setup

• Rancher version: v2.6.5-rc8
• Browser type & version: Chrome Build 101.0.4951.54

Describe the bug

After creating a cluster with Standard user, the snapshots tab is missing and doesn't appear until I an admin takes a snapshot from the Cluster Management page.

To Reproduce

1. Create RKE2 node driver cluster
2. Click on cluster from Cluster management page
3. Look for Snapshots on navigation tab

Result
Snapshots tab is missing

Expected Result

Snapshots tab should be there.

[mantis-toboggan-md]

The snapshot tab is only shown if the current user has access to the relevant schema, and that schema has a 'collection' link: this was implemented pretty recently here. All that makes sense, but I think there is a backend bug here. Standard users can't load the rke.cattle.io.etcdsnapshot schema unless they've already created a snapshot (or someone else has made one in their cluster).

[Jono-SUSE-Rancher]

@samjustus based on the feedback from Nancy, this is almost certainly going to be a Neo issue. Can you prioritize for 2.6.6? We should release note for 2.6.5.

[sowmyav27]

On 2.6head commit id: 628b1b9

• Deployed an RKE2 cluster
• Add user1 as cluster owner
• Login as user1
• snapshots tab is missing
• As user1 take a manual snapshot
• Snapshot tab and snapshots are available
• Restore option is also available on the snapshot

[cbron]

@sowmyav27 @timhaneunsoo aren't your scenario's different ? Original case is for cluster owner / creator, and not a cluster member. Fixed above

[KevinJoiner]

I've spent some time looking into this and the cause of the issue stems from how we are storing and granting snapshot permissions. Each snapshot is stored in the fleet-default namespace. Then a rolebinding is created for the given snapshot to allow the appropriate users/groups access. Since the access to rke.cattle.io.etcdsnapshot is on a per snapshot bases when there are no snapshots create users have no access to rke.cattle.io.etcdsnapshot.

[timhaneunsoo]

Test Environment:

Rancher version: v2.6-head f40e542
Rancher cluster type: HA
Docker version: 20.10

Downstream cluster type: RKE2 node driver

---

Testing:

Tested this issue with the following steps:

1. Create RKE2 node driver cluster
2. Click on cluster from Cluster management page
3. Look for Snapshots on navigation tab

Result - Pass
After creating a cluster with Standard user, the snapshots tab is no longer missing.

[samjustus]

@KevinJoiner will need release note for this issue

[KevinJoiner]

Release Note

Synopsis of issue: Users with the role 'Cluster Owners' who were not also 'Admins' were not able to manage snapshots on rke2 clusters.
Status: Resolved