Uploaded image for project: 'Red Hat Workload Availability'
  1. Red Hat Workload Availability
  2. RHWA-655

SBR | Missing Permissions to Create SCC when installing via Operator Hub

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • rhwa-26.1
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • Important

      Attempting to install the SBR Operator via OLM and applying a default SBDConfig results in a broken state where Agent pods cannot start. 

      Missing Permissions to Create SCC : The operator controller logs repeated errors stating it cannot find the required SecurityContextConstraints: Failed to ensure SCC permissions... required SCC 'sbd-operator-sbd-agent-privileged' not found

       

      Upon inspecting the installed ClusterServiceVersion (storage-base-remediation.v0.1.0), the ClusterRole granted to the operator service account (sbd-operator-controller-manager) includes permissions to get, list, patch, and update SCCs, but missing the create verb.

      Since the SCC is not included as a static resource in the OLM bundle, and the operator is forbidden from creating it at runtime, the installation never converges.

              Unassigned Unassigned
              rh-ee-malter Maxim Alter
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: