Uploaded image for project: 'OpenShift API Server'
  1. OpenShift API Server
  2. API-1651

Create separate controllers for default service accounts


    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • None
    • None
    • 5
    • False
    • None
    • False
    • OCPSTRAT-242 - No auto-generated secrets for SA when Registry is disabled
    • Customer Escalated, Customer Facing

      Openshift-controller-manager has a controller that automatically creates "managed" service accounts that support OpenShift features in every namespace. In OCP 4, this was effectively hard-coded to create the "builder" and "deployer" service accounts.

      This controller should be refactored so we have separate instances for the builder and deployer service account, respectively. This will let us disable said controllers via the Capabilities API and ocm-o.

            lusanche@redhat.com Luis Sanchez
            adkaplan@redhat.com Adam Kaplan
            0 Vote for this issue
            2 Start watching this issue