Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-681

Replace SCC permissions in Quay Operator with OLM 4.5 feature doing same

    XMLWordPrintable

Details

    • Feature
    • Resolution: Done
    • Minor
    • quay-v3.3.1
    • None
    • quay-operator
    • None
    • 0
    • 0% 0%
    • Qui-Gon [Quay 184], Red5 [Quay 185]
    • 0

    Description

      According to https://github.com/redhat-cop/quay-operator/blob/0daa0d326ceffe066c7f80929b4146103bddd976/deploy/olm-catalog/quay/1.1.0/quay.v1.1.0.clusterserviceversion.yaml#L551-L561 we are giving the Quay Operator RBAC permissions to modify SCCs, against our general advice to partners/customers not to do so.

      In OLM 4.5 you should be able to ship your own SCCs directly in the Operator bundle, eliminating the need to give this permission to the Operator itself. We should remove the RBAC permissions and use the 4.5 feature when it's available.

      Attachments

        Activity

          People

            ablock@redhat.com Andrew Block
            bdettelb@redhat.com Bill Dettelback
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: