-
Task
-
Resolution: Done
-
Minor
-
None
-
None
install-cni pods which run in the same namespace as the operator (typically openshift-operators) currently have the `hostNetwork` permission, but it isn't really necessary.
Given the pods run with elevated privileges, having access to the host network is dangerous.
We should be able to remove this permission and have no side effect, everything must continue to work just fine with regards to CNI and sidecar injection.