CARRY: Allow non-admin user access to view clusterqueue(metrics)

config/rhoai/batch-user-rolebinding.yaml

@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: batch-user-rolebinding
+subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: 'system:authenticated'
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: batch-user-role

config/rhoai/clusterqueue_viewer_role_patch.yaml

@@ -0,0 +1,7 @@
+# patch to add clusterqueue-viewer-role to batch-user
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: clusterqueue-viewer-role
+  labels:
+    rbac.kueue.x-k8s.io/batch-user: 'true'

config/rhoai/kustomization.yaml

@@ -41,6 +41,7 @@ resources:
 - monitor.yaml
 - binding_admin_roles.yaml
 - webhook_network_policy.yaml
+- batch-user-rolebinding.yaml
 
 patches:
 # Mount the controller config file for loading manager configurations
@@ -51,3 +52,4 @@ patches:
 - path: auth_proxy_service_patch.yaml
 - path: mutating_webhook_patch.yaml
 - path: validating_webhook_patch.yaml
+- path: clusterqueue_viewer_role_patch.yaml