This makes it so that ansible jobs can be run from namespace other than the on the operator is installed on (for cluster-scoped operator installations)
I removed these during the operator-sdk upgrade to v1.12 to be conservative about permissions and also because I didn't understand at the time what their purpose was. It is clear now that they are needed to successfully start pods from namespaces other than the one the operator is installed in.
This makes it so that ansible jobs can be run from namespace other than the on the operator is installed on (for cluster-scoped operator installations)
I removed these during the operator-sdk upgrade to v1.12 to be conservative about permissions and also because I didn't understand at the time what their purpose was. It is clear now that they are needed to successfully start pods from namespaces other than the one the operator is installed in.