Admin Settings - RBAC - Main view and routes 2 (kubeflow#1247)

* addressed comments

Signed-off-by: Yulia Krimerman <[email protected]>

* fixed merge conflicts

Signed-off-by: Yulia Krimerman <[email protected]>

* enabled Create call

Signed-off-by: Yulia Krimerman <[email protected]>

* addressed comments

Signed-off-by: Yulia Krimerman <[email protected]>

* addressed latest comments

Signed-off-by: Yulia Krimerman <[email protected]>

* fixed backend test

Signed-off-by: Yulia Krimerman <[email protected]>

---------

Signed-off-by: Yulia Krimerman <[email protected]>

Author: YuliaKrimerman

clients/ui/bff/internal/api/model_registry_settings_rbac_handler.go

@@ -5,6 +5,7 @@ import (
 
 	"github.com/julienschmidt/httprouter"
 	"github.com/kubeflow/model-registry/ui/bff/internal/models"
+	rbacv1 "k8s.io/api/rbac/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	// Add other necessary imports like context, slog, helpers etc.
 )
@@ -53,6 +54,75 @@ func (app *App) GetRoleBindingsHandler(w http.ResponseWriter, r *http.Request, p
 			Items: []models.RoleBinding{
 				{ /* Dummy RoleBinding 1 */ ObjectMeta: metav1.ObjectMeta{Name: "stub-rb-1"}},
 				{ /* Dummy RoleBinding 2 */ ObjectMeta: metav1.ObjectMeta{Name: "stub-rb-2"}},
+				{
+					ObjectMeta: metav1.ObjectMeta{
+						Name: "model-registry-permissions",
+						Labels: map[string]string{
+							"app.kubernetes.io/name":      "model-registry",
+							"app":                         "model-registry",
+							"app.kubernetes.io/component": "model-registry",
+							"app.kubernetes.io/part-of":   "model-registry",
+						},
+					},
+					Subjects: []rbacv1.Subject{
+						{
+							Kind:     "User",
+							Name:     "admin-user",
+							APIGroup: "rbac.authorization.k8s.io",
+						},
+					},
+					RoleRef: rbacv1.RoleRef{
+						Kind:     "Role",
+						Name:     "registry-user-model-registry",
+						APIGroup: "rbac.authorization.k8s.io",
+					},
+				},
+				{
+					ObjectMeta: metav1.ObjectMeta{
+						Name: "model-registry-dora-permissions",
+						Labels: map[string]string{
+							"app.kubernetes.io/name":      "model-registry-dora",
+							"app":                         "model-registry-dora",
+							"app.kubernetes.io/component": "model-registry",
+							"app.kubernetes.io/part-of":   "model-registry",
+						},
+					},
+					Subjects: []rbacv1.Subject{
+						{
+							Kind:     "User",
+							Name:     "dora-user",
+							APIGroup: "rbac.authorization.k8s.io",
+						},
+					},
+					RoleRef: rbacv1.RoleRef{
+						Kind:     "Role",
+						Name:     "registry-user-model-registry-dora",
+						APIGroup: "rbac.authorization.k8s.io",
+					},
+				},
+				{
+					ObjectMeta: metav1.ObjectMeta{
+						Name: "model-registry-bella-permissions",
+						Labels: map[string]string{
+							"app.kubernetes.io/name":      "model-registry-bella",
+							"app":                         "model-registry-bella",
+							"app.kubernetes.io/component": "model-registry",
+							"app.kubernetes.io/part-of":   "model-registry",
+						},
+					},
+					Subjects: []rbacv1.Subject{
+						{
+							Kind:     "Group",
+							Name:     "bella-team",
+							APIGroup: "rbac.authorization.k8s.io",
+						},
+					},
+					RoleRef: rbacv1.RoleRef{
+						Kind:     "Role",
+						Name:     "registry-user-model-registry-bella",
+						APIGroup: "rbac.authorization.k8s.io",
+					},
+				},
 			},
 		},
 	}

clients/ui/bff/internal/api/model_registry_settings_rbac_handler_test.go

@@ -56,9 +56,27 @@ var _ = Describe("TestRoleBindingHandlers", func() {
 			Expect(err).NotTo(HaveOccurred())
 
 			Expect(rr.Code).To(Equal(http.StatusOK))
-			Expect(actual.Data.Items).To(HaveLen(2))
+			Expect(actual.Data.Items).To(HaveLen(5))
+
+			// Check the first two stub role bindings
 			Expect(actual.Data.Items[0].Name).To(Equal("stub-rb-1"))
 			Expect(actual.Data.Items[1].Name).To(Equal("stub-rb-2"))
+
+			// Check model-registry permissions role binding
+			Expect(actual.Data.Items[2].Name).To(Equal("model-registry-permissions"))
+			Expect(actual.Data.Items[2].Labels["app.kubernetes.io/name"]).To(Equal("model-registry"))
+			Expect(actual.Data.Items[2].Subjects[0].Name).To(Equal("admin-user"))
+
+			// Check dora permissions role binding
+			Expect(actual.Data.Items[3].Name).To(Equal("model-registry-dora-permissions"))
+			Expect(actual.Data.Items[3].Labels["app.kubernetes.io/name"]).To(Equal("model-registry-dora"))
+			Expect(actual.Data.Items[3].Subjects[0].Name).To(Equal("dora-user"))
+
+			// Check bella permissions role binding
+			Expect(actual.Data.Items[4].Name).To(Equal("model-registry-bella-permissions"))
+			Expect(actual.Data.Items[4].Labels["app.kubernetes.io/name"]).To(Equal("model-registry-bella"))
+			Expect(actual.Data.Items[4].Subjects[0].Name).To(Equal("bella-team"))
+			Expect(actual.Data.Items[4].Subjects[0].Kind).To(Equal("Group"))
 		})
 
 		It("should create a role binding", func() {