We now gate the autoscaler status, pause/resume and events tab to users who have access

Author: codyrancher

shell/components/formatter/Autoscaler.vue

@@ -45,6 +45,7 @@ const stopPropagation = (event: Event) => {
         #heading-action="{close}"
       >
         <RcButton
+          v-if="row.canPauseResumeAutoscaler"
           secondary
           small
           class="action"

shell/detail/provisioning.cattle.io.cluster.vue

@@ -626,7 +626,7 @@ export default {
     },
 
     showAutoScalerTab() {
-      return isAutoscalerFeatureFlagEnabled(this.$store);
+      return isAutoscalerFeatureFlagEnabled(this.$store) && this.value.hasAccessToAutoscalerConfigMap;
     }
   },
 

shell/models/provisioning.cattle.io.cluster.js

@@ -175,7 +175,7 @@ export default class ProvCluster extends SteveModel {
         action:  'toggleAutoscalerRunner',
         label:   this.isAutoscalerPaused ? 'Resume Autoscaler' : 'Pause Autoscaler',
         icon:    `icon ${ this.isAutoscalerPaused ? 'icon-play' : 'icon-pause' }`,
-        enabled: this.isAutoscalerEnabled
+        enabled: this.canPauseResumeAutoscaler
       },
       { divider: true }];
 
@@ -1082,17 +1082,30 @@ export default class ProvCluster extends SteveModel {
     return events.filter((event) => event.involvedObject.name === 'cluster-autoscaler-status');
   }
 
+  get hasAccessToAutoscalerConfigMap() {
+    // This may change but for now this is the best proxy we have for access to the configmap without attempting to access it and getting a 404.
+    return this.canEdit;
+  }
+
   async loadAutoscalerConfigMap() {
     const url = `/k8s/clusters/${ this.mgmtClusterId }/v1/${ CONFIG_MAP }/${ AUTOSCALER_CONFIG_MAP_ID }`;
 
     return await this.$dispatch('cluster/request', { url }, { root: true });
   }
 
+  get canPauseResumeAutoscaler() {
+    return this.isAutoscalerEnabled && this.canExplore && this.hasAccessToAutoscalerConfigMap;
+  }
+
   async loadAutoscalerStatus() {
     if (!this.canExplore) {
       return AUTOSCALER_STATUS.PROVISIONING;
     }
 
+    if (!this.hasAccessToAutoscalerConfigMap) {
+      return AUTOSCALER_STATUS.UNAVAILABLE;
+    }
+
     try {
       const configMap = await this.loadAutoscalerConfigMap();
       const yaml = configMap?.data?.status || '';