Skip to content

[OSPRH-33383] Remove unused privileged SCC from CloudKitty kubebuilde… - #971

Open
jlarriba wants to merge 1 commit into
openstack-k8s-operators:mainfrom
jlarriba:OSPRH-33383-remove-privileged-scc
Open

[OSPRH-33383] Remove unused privileged SCC from CloudKitty kubebuilde…#971
jlarriba wants to merge 1 commit into
openstack-k8s-operators:mainfrom
jlarriba:OSPRH-33383-remove-privileged-scc

Conversation

@jlarriba

Copy link
Copy Markdown
Collaborator

…r RBAC marker

The CloudKitty controller's kubebuilder marker requested use on both anyuid and privileged SCCs, but no generated workload sets Privileged: true or uses host namespaces. The workload Role the controller creates only delegates anyuid. This removes the dead-weight privileged grant from the marker and regenerates config/rbac/role.yaml.

@openshift-ci
openshift-ci Bot requested review from mgirgisf and paramite July 30, 2026 10:25
@openshift-ci

openshift-ci Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jlarriba

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@centosinfra-prod-github-app

Copy link
Copy Markdown

Merge Failed.

This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.
Warning:
Error merging github.com/openstack-k8s-operators/telemetry-operator for 971,78d9efa8e206327e1e124c8c033de7247e47f702

…r RBAC marker

The CloudKitty controller's kubebuilder marker requested use on both
anyuid and privileged SCCs, but no generated workload sets Privileged:
true or uses host namespaces. The workload Role the controller creates
only delegates anyuid. This removes the dead-weight privileged grant
from the marker and regenerates config/rbac/role.yaml.

Signed-off-by: Juan Larriba <jlarriba@redhat.com>
@jlarriba
jlarriba force-pushed the OSPRH-33383-remove-privileged-scc branch from 78d9efa to 1c304b2 Compare July 30, 2026 10:30
@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/705016c63525472199279b4f13f0ab4e

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 5h 06m 12s
✔️ telemetry-operator-multinode-cloudkitty SUCCESS in 1h 46m 40s
✔️ telemetry-openstack-meta-content-provider-all-services-master SUCCESS in 4h 58m 00s
✔️ telemetry-operator-multinode-master SUCCESS in 2h 00m 25s
openstack-k8s-operators-content-provider FAILURE in 20m 56s
⚠️ telemetry-operator-multinode-default-telemetry SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
✔️ functional-tests-osp18 SUCCESS in 2h 26m 19s

@jlarriba

Copy link
Copy Markdown
Collaborator Author

recheck

@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/72cf0719f6a046b69e3717574ea5ab42

✔️ telemetry-openstack-meta-content-provider-master SUCCESS in 2h 49m 40s
✔️ telemetry-operator-multinode-cloudkitty SUCCESS in 1h 36m 14s
✔️ telemetry-openstack-meta-content-provider-all-services-master SUCCESS in 2h 37m 04s
✔️ telemetry-operator-multinode-master SUCCESS in 1h 48m 40s
openstack-k8s-operators-content-provider FAILURE in 5m 22s
⚠️ telemetry-operator-multinode-default-telemetry SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
✔️ functional-tests-osp18 SUCCESS in 2h 21m 05s

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant