Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Change OLM deployment to add ServiceAccount with nonroot #545

Closed
wants to merge 1 commit into from
Closed

Change OLM deployment to add ServiceAccount with nonroot #545

wants to merge 1 commit into from

Conversation

burmanm
Copy link
Contributor

@burmanm burmanm commented Jun 28, 2023 •
edited
Loading

What this PR does:
When creating the bundle, a new serviceAccount called cass-operator-cassandra-default-sa is created with nonroot access. If cass-operator detects the Datacenter is deployed in a OLM installation, this same ServiceAccount is set for the StatefulSets.

Output in CSV:

        - rules:
            - apiGroups:
                - security.openshift.io
              resourceNames:
                - nonroot
              resources:
                - securitycontextconstraints
              verbs:
                - use
          serviceAccountName: cass-operator-cassandra-default-sa

@mgoerens

Which issue(s) this PR fixes:
Fixes #541

Checklist

  • Changes manually tested
  • Automated Tests added/updated
  • Documentation added/updated
  • CHANGELOG.md updated (not required for documentation PRs)
  • CLA Signed: DataStax CLA

@burmanm burmanm marked this pull request as ready for review June 28, 2023 13:49
@burmanm burmanm requested a review from a team as a code owner June 28, 2023 13:49
@burmanm
Copy link
Contributor Author

burmanm commented Jun 29, 2023

Related: k8ssandra/management-api-for-apache-cassandra#310

@burmanm burmanm changed the title Change OLM deployment to add ServiceAccount with anyuid Change OLM deployment to add ServiceAccount with nonroot Jun 29, 2023
@burmanm
Change OLM deployment to add ServiceAccount called cass-operator-cass…
9b3ae92 
…andra-default-sa which has anyuid set in the Role

Use nonroot instead of anyuid
@burmanm burmanm mentioned this pull request Jun 30, 2023
Merged
5 tasks
@burmanm
Copy link
Contributor Author

burmanm commented Jun 30, 2023

Closed in favor of #547

@burmanm burmanm closed this Jun 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

datastax/cass-config-builder pull error on OCP
1 participant
@burmanm