Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Critical
Fix Version/s: None
Affects Version/s: 4.21.0
Component/s: kube-apiserver
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
Critical
Regression:
None

Target Backport Versions:
None
Target Version:
None
Release Blocker:
Rejected
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:

    openshift-kube-apiserver/kube-apiserver-guard pod is using default service account. Workloads that are part of the default OpenShift payload should not use a default service account, but rather should their own bespoke service account. 

This is related to work to eliminate default service account usage, as shown in https://issues.redhat.com/browse/OCPSTRAT-2401 .

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:

    1.
    2.
    3.

Actual results:

Expected results:

Additional info:

blocks

OCPSTRAT-2401 Ensure Default Service Accounts are not used by OpenShift Operators

In Progress

Assignee:: Unassigned

Reporter:: Evan Hearne

Need Info From:: None

Contributors:: None

QA Contact:: Ke Wang

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2025/11/13 4:13 PM

Updated:: 2025/11/14 2:52 PM