Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-77228

Hub RDS is missing permissions for ClusterLogging CRs

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.20, 4.21
    • GitOps ZTP
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:
      Hub RDS is missing RBAC permissions to create Cluster Logging operator CRs
      The following permissions are needed in ArgoCD role when applying Hub RDS (in clusterrole.yaml)

      - apiGroups:
        - ""
        resources:
        - serviceaccounts
        verbs:
        - '*'
      - apiGroups:
        - observability.openshift.io
        resources:
        - clusterlogforwarders
        verbs:
        - '*'
      

      This allows creation of the required ServiceAccount for Audit and Infrastructure log collection and the ClusterLogForwarder CR.

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          100%

      Steps to Reproduce:

          1.
          2.
          3.
          

      Actual results:

          

      Expected results:

          

      Additional info:

          

              sahasan@redhat.com Sabbir Hasan
              rhn-support-imiller Ian Miller
              None
              None
              Dwaine Gonyier Dwaine Gonyier
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: