search

openshift / instaslice-operator

InstaSlice Operator facilitates slicing of accelerators using stable APIs
Apache License 2.0
14 stars 12 forks source link

SCC for daemonset not integrated with openshift operator bundle #227

Open cpmeadors opened 2 weeks ago

cpmeadors commented 2 weeks ago

the SCC and rbac configuration from these files are needed to allow the daemonset to start on and OpenShift cluster.

config/rbac/instaslice-operator-scc.yaml config/rbac/openshift_cluster_role.yaml config/rbac/openshift_scc_cluster_role_binding.yaml

This is usually done by adding them to the config/rbac/kustomization.yaml file which causes them to be rendered into the CSV of the bundle. This has been tested and worked but instaslice-operator-scc.yaml still needed to be applied manually.

cpmeadors commented 2 weeks ago

https://sdk.operatorframework.io/docs/best-practices/pod-security-standards/ provides some guidance on how this is supposed to be done.