Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1914354

Summary: nmstate-operator service account lacks permission to install handler to a different namespace
Product: OpenShift Container Platform Reporter: Brad P. Crochet <brad>
Component: NetworkingAssignee: Ben Nemec <bnemec>
Networking sub component: kubernetes-nmstate QA Contact: Oleg Sher <osher>
Status: CLOSED WONTFIX Docs Contact:
Severity: high    
Priority: high CC: achernet, aconstan, asegurap, bbennett, beth.white, bnemec, eglottma, hpokorny, rpittau, vpickard, vvoronko
Version: 4.7Keywords: Triaged
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-10-13 14:22:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Brad P. Crochet 2021-01-08 16:05:59 UTC 
Description of problem:

The nmstate-operator service account needs the 'services' resource permission in order to deploy the webhook properly.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 Brad P. Crochet 2021-01-11 21:09:19 UTC 
The problem is more with having a namespace that is different between the handler and the operator. The workaround for now is to ensure that the namespace is the same for both. This still needs to be solved with the ability of the operator to install the handler to a different namespace.
Comment 4 Victor Pickard 2021-10-13 14:22:07 UTC 
Closing as wontfix. There are no customer requests for this support. If this does indeed become a requirement, we will open a new BZ.