-
Notifications
You must be signed in to change notification settings - Fork 135
DOCS-2808: Add docs for namespaced dashboards #2494
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: publish/cc-feb
Are you sure you want to change the base?
DOCS-2808: Add docs for namespaced dashboards #2494
Conversation
✅ Deploy Preview succeeded!Built without sensitive environment variables
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for calico-docs-preview-next ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR adds documentation for the new namespaced dashboard access feature in Calico Cloud version 22-2 (February 2026 release). The feature allows administrators to grant users dashboard access limited to specific namespaces, improving security by ensuring users only view data for areas they are authorized to manage.
Changes:
- Added release notes for the namespaced dashboard feature with a breaking change warning about View Network Sets permissions
- Updated custom roles documentation to explain namespaced dashboard access permissions
- Enhanced dashboard documentation with role-based access control information
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 7 comments.
| File | Description |
|---|---|
calico-cloud_versioned_docs/version-22-2/users/create-and-assign-custom-roles.mdx |
Added explanation in the overview about namespaced dashboard permissions and updated the Dashboard row in the permissions table to clarify namespaced access behavior |
calico-cloud_versioned_docs/version-22-2/release-notes/index.mdx |
Added stub release notes for February 2026 with namespaced dashboard feature description and breaking change warning |
calico-cloud_versioned_docs/version-22-2/observability/dashboards.mdx |
Added new "Role access to dashboards" section documenting which user roles can access dashboards and clarifying custom role permissions |
| @@ -11,7 +11,18 @@ title: Release notes | |||
|
|
|||
| #### Feature 1 | |||
Copilot
AI
Jan 29, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The release notes contain placeholder text "#### Feature 1" which should be replaced with actual content or removed before release.
| #### Feature 3 | ||
|
|
Copilot
AI
Jan 29, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The release notes contain placeholder text "#### Feature 3" which should be replaced with actual content or removed before release.
| #### Feature 3 |
calico-cloud_versioned_docs/version-22-2/users/create-and-assign-custom-roles.mdx
Outdated
Show resolved
Hide resolved
calico-cloud_versioned_docs/version-22-2/release-notes/index.mdx
Outdated
Show resolved
Hide resolved
calico-cloud_versioned_docs/version-22-2/observability/dashboards.mdx
Outdated
Show resolved
Hide resolved
calico-cloud_versioned_docs/version-22-2/observability/dashboards.mdx
Outdated
Show resolved
Hide resolved
bc0a77d to
6fa8d54
Compare
| Namespaced access to dashboards can be managed by adding namespaces to the **View Network Sets** custom role permission. | ||
|
|
||
| :::important | ||
| Changes in this release will cause users with the **View Network Sets** custom role permission to lose access to all dashboards. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
About the Changes in this release... paragraph:
The View Network Sets custom role permission is required for custom role users to view dashboard charts data, so it would be users that do not have the View Network Sets custom role permission that will lose access to dashboards data (all these users are still be able to view the dashboards, but dashboard charts will display the "You do not have permission to view this chart data" message for users that do not have the View Network Sets custom role permission).
FYI this is assuming they do not have one of the predefined roles in the Role access to dashboards section assigned to them.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, I've modified the text along the lines we talked about.
DOCS-2808
6fa8d54 to
22eac62
Compare
tmjd
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Here are some comments but you may want to go over my comments with @jaderhs
| Namespaced access to dashboards can be managed by specifying namespaces in the **View Network Sets** custom role permission. | ||
|
|
||
| :::important | ||
| Changes in this release may cause some users with the **View Network Sets** custom role permission to lose access to dashboard data. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jaderhs is this accurate? My understanding is for a custom role, if it doesn't have any "View Network Sets" permissions then they won't have access to dashboard data.
|
|
||
| :::important | ||
| Changes in this release may cause some users with the **View Network Sets** custom role permission to lose access to dashboard data. | ||
| To restore access, administrators must edit their custom roles to explicitly add namespaces to the **View Network Sets** permission. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe it is also an option to give a custom role access to "View Network Sets" in all namespaces in a cluster to give access to all dashboard data in a cluster.
|
|
||
| Not all users have access to dashboards. | ||
| Creating custom dashboards is limited to administrators. | ||
| Access may be limited to a particular cluster or namespace. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd suggest that for custom roles, access will be limited only to clusters that have been given explicit access and those permissions may only be for particular namespaces.
The key part I'm trying to point out is that it isn't possible to say a custom role has access to a particular namespace in all clusters.

Docs content and release note for namespaced dashboards feature.
Product Version(s):
Issue:
Link to docs preview:
Release note: https://deploy-preview-2494--tigera.netlify.app/calico-cloud/release-notes/#namespaced-access-to-dashboards
New section: Role access to dashboards https://deploy-preview-2494--tigera.netlify.app/calico-cloud/observability/dashboards#role-access-to-dashboards
Changes to Dashboard feature area notes: https://deploy-preview-2494--tigera.netlify.app/calico-cloud/users/create-and-assign-custom-roles#required-permissions-for-common-calico-cloud-features
SME review:
DOCS review:
Additional information:
Merge checklist: