-
Bug
-
Resolution: Done-Errata
-
Normal
-
4.14.0
-
None
-
Low
-
No
-
False
-
Description of problem:
When listing installed operators, we attempt to list subscriptions in all namespaces in order to associate subscriptions/csvs. This prevents users without cluster scope list priveleges from seeing subscriptions on this page, which makes the uninstall action unavailable.
Version-Release number of selected component (if applicable):
4.14
How reproducible:
Always
Steps to Reproduce:
1. Install an namespaced operator 2. Log in as a user with project admin permissions where the operator was installed 3. Visit the installed operators page 4. Click the kebab menu for the operator from step 1
Actual results:
The only action available is to delete the CSV
Expected results:
The "Uninstall Operator" and "Edit Subscriptions" actions should show since the user has permission to view, edit, delete Subscription resources in this namespace.
Additional info:
- links to
-
RHSA-2023:5006 OpenShift Container Platform 4.14.z security update