adding permissions for cli.config.read and code fix for non admin use… (#313)

* adding permissions for cli.config.read and code fix for non admin users cli config download

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

* includes changes for nix, go version 1.21 and addressed review comments

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

* fixed lints

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

---------

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

scripts/initialize/main.go

@@ -309,7 +309,7 @@ retry:
 			Password:  p,
 			Groups:    []string{admingrp.Metadata.Name, localUsersGrp.Metadata.Name},
 			ProjectNamespaceRoles: []*userv3.ProjectNamespaceRole{
-				{Role: "ADMIN", Group: &admingrp.Metadata.Name},
+				{Role: "ADMIN", Group: admingrp.Metadata.Name},
 			},
 			ForceReset: true,
 		},

scripts/initialize/permissions/base/cli_config_read.json

@@ -0,0 +1,15 @@
+{
+    "name": "cli.config.read",
+    "resource_urls": [
+      {
+        "url": "/cli/config",
+        "methods": [
+          "GET"
+        ]
+      }
+    ],
+    "base_url": "/auth/v3",
+    "description": "Download cli configuration",
+    "authenticated": true,
+    "scope": "PROJECT"
+  }

scripts/initialize/roles/ztka/roles.json

@@ -76,7 +76,8 @@
             "cluster.write",
             "hub.openapi.explorer.read",
             "project.read",
-            "project.write"
+            "project.write",
+            "cli.config.read"
         ],
         "PROJECT_READ_ONLY": [
             "console.all",
@@ -89,7 +90,8 @@
             "v2debug.read",
             "kubectl.cluster.read",
             "cluster.read",
-            "hub.openapi.explorer.read"
+            "hub.openapi.explorer.read",
+            "cli.config.read"
         ],
         "CLUSTER_ADMIN": [
             "console.all",
@@ -104,7 +106,8 @@
             "kubectl.clustersettings.write",
             "kubectl.cluster.read",
             "cluster.read",
-            "kubectl.fullaccess"
+            "kubectl.fullaccess",
+            "cli.config.read"
         ]
     },
     "NAMESPACE": {
@@ -117,7 +120,8 @@
             "kubeconfig.read",
             "v2debug.read",
             "kubectl.namespace.read",
-            "kubectl.namespace.write"
+            "kubectl.namespace.write",
+            "cli.config.read"
         ],
         "NAMESPACE_READ_ONLY": [
             "partner.read",
@@ -126,7 +130,8 @@
             "cluster.read",
             "kubeconfig.read",
             "v2debug.read",
-            "kubectl.namespace.read"
+            "kubectl.namespace.read",
+            "cli.config.read"
         ]
     }
 }