Bug 1807659

Summary:	openshift-cloud-credential-operator: Some core components are in openshift.io/run-level 1 and are bypassing SCC, but should not be
Product:	OpenShift Container Platform	Reporter:	Scott Dodson <sdodson>
Component:	Cloud Credential Operator	Assignee:	Joel Diaz <jdiaz>
Status:	CLOSED ERRATA	QA Contact:	wang lin <lwan>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	4.4	CC:	aos-bugs, ccoleman, eparis, jdiaz, jialiu, jokerman, lwan, mfojtik, nhale, nstielau, sandeepredhat, sfowler, sttts, wsun, xiyuan, xtian, xxia
Target Milestone:	---
Target Release:	4.4.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:	Feature: Stop bypassing SCC for cloud-credential-operator. Reason: Running with excess permissions that are not needed for cloud-credential-operator to perform its tasks. Result: No unnecessary bypassing of SCC for cloud-credential-operator.	Story Points:	---
Clone Of:	1806892	Environment:
Last Closed:	2020-05-26 16:50:30 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1806892
Bug Blocks:	1805488, 1966621

Comment 4 wang lin 2020-05-18 02:08:20 UTC

The bug has fixed, openshift-cloud-credential-operator removed openshift.io/run-level 1.
The verified payload is registry.svc.ci.openshift.org/ocp/release:4.4.0-0.nightly-2020-05-17-211342

Verifying steps
1.oc adm release extract registry.svc.ci.openshift.org/ocp/release:4.4.0-0.nightly-2020-05-17-211342
2.grep -r "openshift.io/run-level"
openshift-cloud-credential-operator is not in openshift.io/run-level 1.

Comment 6 errata-xmlrpc 2020-05-26 16:50:30 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2180