Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-681

Replace SCC permissions in Quay Operator with OLM 4.5 feature doing same

XMLWordPrintable

    • Icon: Feature Feature
    • Resolution: Done
    • Icon: Minor Minor
    • quay-v3.3.1
    • None
    • quay-operator
    • None
    • Qui-Gon [Quay 184], Red5 [Quay 185]
    • 0

      According to https://github.com/redhat-cop/quay-operator/blob/0daa0d326ceffe066c7f80929b4146103bddd976/deploy/olm-catalog/quay/1.1.0/quay.v1.1.0.clusterserviceversion.yaml#L551-L561 we are giving the Quay Operator RBAC permissions to modify SCCs, against our general advice to partners/customers not to do so.

      In OLM 4.5 you should be able to ship your own SCCs directly in the Operator bundle, eliminating the need to give this permission to the Operator itself. We should remove the RBAC permissions and use the 4.5 feature when it's available.

            ablock@redhat.com Andrew Block
            bdettelb@redhat.com Bill Dettelback
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: