fix: grant dashboard SA read access to DevWorkspaceOperatorConfig (#2099)

The dashboard backup feature needs to read the DWOC to get backup
configuration (schedule, registry path, auth secret name). Without
this permission, the dashboard SA gets 403 Forbidden when reading
the DWOC in the DWO namespace, causing backup endpoints to fail
for all users.

Assisted-by: Claude Opus 4.6

Signed-off-by: Oleksii Kurinnyi <okurinny@redhat.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 2 people

pkg/deploy/dashboard/rbac.go

@@ -53,6 +53,11 @@ func GetPrivilegedPoliciesRulesForKubernetes() []rbacv1.PolicyRule {
 			Resources: []string{"configmaps"},
 			Verbs:     []string{"get", "list"},
 		},
+		{
+			APIGroups: []string{"controller.devfile.io"},
+			Resources: []string{"devworkspaceoperatorconfigs"},
+			Verbs:     []string{"get"},
+		},
 	}
 
 	if !infrastructure.IsOpenShift() {