Web update for using RBAC with resource label

[khanhtc1202]

What this PR does / why we need it:

Which issue(s) this PR fixes:

Part of #4918

Does this PR introduce a user-facing change?:

• How are users affected by this change:
• Is this breaking change:
• How to migrate (if breaking change):

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 29.29%. Comparing base (b1177ab) to head (c4a35d2).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #4920   +/-   ##
=======================================
  Coverage   29.29%   29.29%           
=======================================
  Files         321      321           
  Lines       40835    40835           
=======================================
  Hits        11964    11964           
  Misses      27913    27913           
  Partials      958      958           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[t-kikuc]

LTGM, thanks!

[ffjlabo]

@khanhtc1202
[ASK]
Which resources do you expect to be restricted by the label?
I have concerns about the pattern resources=*{env: dev};actions=*.
PipeCD has 7 resources (application, deployment, event, piped, project, apiKey, insight), and some of them don't have the label. (e.g. piped) . 👀
https://pipecd.dev/docs-v0.47.x/user-guide/managing-controlplane/auth/#configuring-the-pipecds-roles

[khanhtc1202]

@khanhtc1202

[ASK]

Which resources do you expect to be restricted by the label?

I have concerns about the pattern resources=*{env: dev};actions=*.

PipeCD has 7 resources (application, deployment, event, piped, project, apiKey, insight), and some of them don't have the label. (e.g. piped) . 👀

https://pipecd.dev/docs-v0.47.x/user-guide/managing-controlplane/auth/#configuring-the-pipecds-roles

To simplify users' config, your mentioned pattern will be treated as all resource which have label env:dev and if it's resource without labels, just ignore the labels. Your point is a good catch, I will think about it while implementing the server side 👍

[ffjlabo]

OK, sounds nice 👍

[ffjlabo]

LGTM 🚀