Enable admins to view all resources on the status page

proto/gen/rill/runtime/v1/runtime.swagger.yaml

@@ -2542,6 +2542,10 @@ paths:
           in: query
           required: false
           type: string
+        - name: skipChecks
+          in: query
+          required: false
+          type: boolean
       tags:
         - RuntimeService
   /v1/instances/{instanceId}/resources:
@@ -2573,6 +2577,11 @@ paths:
           in: query
           required: false
           type: string
+        - name: skipChecks
+          description: Skip security checks
+          in: query
+          required: false
+          type: boolean
       tags:
         - RuntimeService
   /v1/instances/{instanceId}/resources/-/watch:

proto/rill/runtime/v1/api.proto

@@ -651,6 +651,8 @@ message ListResourcesRequest {
   string kind = 2;
   // Filter by resource path (optional).
   string path = 3;
+  // Skip security checks
+  bool skip_checks = 4;
 }
 
 message ListResourcesResponse {
@@ -673,6 +675,7 @@ message WatchResourcesResponse {
 message GetResourceRequest {
   string instance_id = 1;
   ResourceName name = 2;
+  bool skip_checks = 3;
 }
 
 message GetResourceResponse {

runtime/server/controller.go

@@ -33,6 +33,7 @@ func (s *Server) ListResources(ctx context.Context, req *runtimev1.ListResources
 	observability.AddRequestAttributes(ctx,
 		attribute.String("args.instance_id", req.InstanceId),
 		attribute.String("args.kind", req.Kind),
+		attribute.Bool("args.skip_checks", req.SkipChecks),
 	)
 
 	if !auth.GetClaims(ctx).CanInstance(req.InstanceId, auth.ReadObjects) {
@@ -68,7 +69,8 @@ func (s *Server) ListResources(ctx context.Context, req *runtimev1.ListResources
 		if err != nil {
 			return nil, status.Error(codes.InvalidArgument, err.Error())
 		}
-		if !access {
+		// Check of the request is to skip security checks
+		if !req.SkipChecks && !access {
 			// Remove from the slice
 			rs[i] = rs[len(rs)-1]
 			rs[len(rs)-1] = nil
@@ -155,6 +157,7 @@ func (s *Server) GetResource(ctx context.Context, req *runtimev1.GetResourceRequ
 		attribute.String("args.instance_id", req.InstanceId),
 		attribute.String("args.name.kind", req.Name.Kind),
 		attribute.String("args.name.name", req.Name.Name),
+		attribute.Bool("args.skip_checks", req.SkipChecks),
 	)
 
 	if !auth.GetClaims(ctx).CanInstance(req.InstanceId, auth.ReadObjects) {
@@ -178,7 +181,7 @@ func (s *Server) GetResource(ctx context.Context, req *runtimev1.GetResourceRequ
 	if err != nil {
 		return nil, status.Error(codes.InvalidArgument, err.Error())
 	}
-	if !access {
+	if !req.SkipChecks && !access {
 		return nil, status.Error(codes.NotFound, "resource not found")
 	}
 

web-common/src/proto/gen/rill/runtime/v1/api_pb.ts

@@ -2801,6 +2801,13 @@ export class ListResourcesRequest extends Message<ListResourcesRequest> {
    */
   path = "";
 
+  /**
+   * Skip security checks
+   *
+   * @generated from field: bool skip_checks = 4;
+   */
+  skipChecks = false;
+
   constructor(data?: PartialMessage<ListResourcesRequest>) {
     super();
     proto3.util.initPartial(data, this);
@@ -2812,6 +2819,7 @@ export class ListResourcesRequest extends Message<ListResourcesRequest> {
     { no: 1, name: "instance_id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 2, name: "kind", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 3, name: "path", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 4, name: "skip_checks", kind: "scalar", T: 8 /* ScalarType.BOOL */ },
   ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListResourcesRequest {
@@ -2986,6 +2994,11 @@ export class GetResourceRequest extends Message<GetResourceRequest> {
    */
   name?: ResourceName;
 
+  /**
+   * @generated from field: bool skip_checks = 3;
+   */
+  skipChecks = false;
+
   constructor(data?: PartialMessage<GetResourceRequest>) {
     super();
     proto3.util.initPartial(data, this);
@@ -2996,6 +3009,7 @@ export class GetResourceRequest extends Message<GetResourceRequest> {
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
     { no: 1, name: "instance_id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 2, name: "name", kind: "message", T: ResourceName },
+    { no: 3, name: "skip_checks", kind: "scalar", T: 8 /* ScalarType.BOOL */ },
   ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetResourceRequest {

web-common/src/runtime-client/gen/index.schemas.ts

@@ -69,11 +69,13 @@ export type RuntimeServiceWatchResourcesParams = {
 export type RuntimeServiceListResourcesParams = {
   kind?: string;
   path?: string;
+  skipChecks?: boolean;
 };
 
 export type RuntimeServiceGetResourceParams = {
   "name.kind"?: string;
   "name.name"?: string;
+  skipChecks?: boolean;
 };
 
 export type QueryServiceExportReportBody = {