Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1779080

Summary: Container Security operator cannot install for all namespaces
Product: OpenShift Container Platform Reporter: shahan <hasha>
Component: Management ConsoleAssignee: Alec Merdler <amerdler>
Status: CLOSED NOTABUG QA Contact: Yadan Pei <yapei>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.3.0CC: amerdler, aos-bugs, jokerman, spadgett
Target Milestone: ---   
Target Release: 4.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-12-03 16:36:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description shahan 2019-12-03 09:09:54 UTC
Description of problem:
 Container Security operator cannot install for all namespaces

Version-Release number of selected component (if applicable):
4.3.0-0.nightly-2019-11-29-051144

How reproducible:
Always

Steps to Reproduce:
1. create cso catalogsource 
$ cat cso.catalogsource.yaml 
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
  name: container-security-operator
spec:
  sourceType: grpc
  image: quay.io/quay/cso-catalog@sha256:e664ffe5d207a537f2b0245e6c10c1d198a8de69c9ffa5aed531c2edb24c355d
$ oc create -f cso.catalogsource.yaml
2. Try to install cso for all namspaces: operatorHub page -> install container Security Operator on webconsole for all namespaces.
3.
Actual results:
2. The console will give an error:
Operator not available for selected namespaces
$ oc get csv  container-security-operator.v1.0.0 -n default -o 'jsonpath={.spec.installModes}
  - supported: true
    type: OwnNamespace
  - supported: true
    type: SingleNamespace
  - supported: true
    type: MultiNamespace
  - supported: true
    type: AllNamespaces

Expected results:
The CSO can install for all namespaces


Additional info:

Comment 1 shahan 2019-12-03 09:12:30 UTC
*** Bug 1779081 has been marked as a duplicate of this bug. ***

Comment 2 Samuel Padgett 2019-12-03 14:28:40 UTC
It looks like the CatalogSource needs to be in the openshift-marketplace namespace. Alec, can you confirm that this is expected?

apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
  name: container-security-operator
  namespace: openshift-marketplace
spec:
  sourceType: grpc
  image: quay.io/quay/cso-catalog@sha256:e664ffe5d207a537f2b0245e6c10c1d198a8de69c9ffa5aed531c2edb24c355d

Comment 3 Alec Merdler 2019-12-03 16:16:20 UTC
Yes, it needs to be in the `openshift-marketplace` namespace, as it says in the docs (https://github.com/quay/container-security-operator#deploying-using-olm).