Merge pull request pivotal#3474 from seagomezar/ssc-ui-ki

docs(Supply Chain UI): 📝 Updating the Known Issues for the TDP -…

Author: Yugang Wang

release-notes.hbs.md

@@ -152,9 +152,27 @@ enable TUF:
 
 - SCST - Store returns an expired certificate error message when a CA certificate expires before the app certificate. For more information, see [CA Cert expires](scst-store/troubleshooting.hbs.md#ca-cert-expires).
 
+
+#### <a id='1-9-0-ssc-ui-ki'></a> v1.9.0 Known issues: Supply Chain UI
+
+- When accessing the supply chain tab in the Tanzu Developer Portal, users might encounter an error related to data.packaging.carvel.dev. The error message displayed is related to permission issues and JSON parsing errors, specifically mentioning that the user "system:serviceaccount:tap-gui:tap-gui-viewer" cannot list resource "packages" in the API group "data.packaging.carvel.dev" at the cluster scope. Additionally, an unexpected non-whitespace character is reported after JSON at position 4.
+
+Workaround: A temporary solution involves applying an RBAC configuration that includes permissions (get, watch, list) for the resources within the data.packaging.carvel.dev API group. This configuration mitigates the issue but it is highlighted that such a requirement should not be mandated for supply chains not generating Carvel packages.
+
+Configuring RBAC to allow access to the Carvel package resource eliminates the error message:
+
+```
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+- apiGroups: [data.packaging.carvel.dev]
+  resources: [packages]
+  verbs: ['get', 'watch', 'list']
+```
+
 #### <a id='1-9-0-tdp-ki'></a>v1.9.0 Known issues: Tanzu Developer Portal - ScmAuth
 [ScmAuth](https://backstage.io/docs/reference/integration-react.scmauth/) is a Backstage concept that abstracts Source Code Management (SCM) authentication into a package. An oversight in a recent codebase migration led to the accidental exclusion of custom ScmAuth functionality, affecting certain client operations such as creating Git repos on behalf of users via Application Accelerators. This issue is scheduled for correction in the next patch release.
 
+
 ---
 
 ### <a id='1-9-0-components'></a> v1.9.0 Component versions