Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-4780

Requesting OLM to reference service accounts in copied namespaces for rolebindings, and add multiple entries in ClusterRoleBindings for all target namespaces.

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • openshift-4.15
    • OLM
    • None
    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request

      Enhancing Multi-Namespace Installation Mode in OLM 

      2. What is the nature and description of the request?

      While assessing the multi-namespace installation mode, we've identified OLM generates roles and rolebindings in the copied CSV's namespace. However, we observe that the corresponding service account isn't created in that namespace, and rolebindings still reference service accounts in the original CSV's namespace. This behavior appears to be a potential bug rather than an intended feature. Additionally, it would be beneficial to enhance ClusterRole bindings to support multiple entries of service accounts, enabling more comprehensive and flexible management of operators across diverse namespaces. We kindly request your attention to these observations and consider them as potential issues to be addressed.

      3. Why does the customer need this? (List the business requirements here)

      We aim to facilitate support for multiple storage systems across various namespaces and, as a prerequisite, necessitate OLM to manage all permission-related resources within the specified target namespaces. 

      4. List any affected packages or components.

      OLM

      Related Issue: https://issues.redhat.com/browse/OCPBUGS-20473
      Slack thread: https://redhat-internal.slack.com/archives/C3VS0LV41/p1697030404811209

              DanielMesser Daniel Messer
              nigoyal Nitin Goyal
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: