Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automated backport of #515: Add RBAC access to finalizers for the operator role #518

Conversation

tpantelis
Copy link
Contributor

Backport of #515 on release-0.15.

#515: Add RBAC access to finalizers for the operator role

For details on the backport process, see the backport requests page.

On Openshift, the operator failed with error

"\"submariner-gateway\" is forbidden: cannot set blockOwnerDeletion
if an ownerReference refers to a resource you can't set finalizers on"

Openshift enables OwnerReferencesPermissionEnforcement, so
in order to set blockOwnerDeletion for an object, the user needs
update permission for the finalizers subresource of the referenced
owner. In this case the owner is the Submariner object.

Signed-off-by: Tom Pantelis <[email protected]>
@submariner-bot
Copy link
Contributor

🤖 Created branch: z_pr518/tpantelis/automated-backport-of-#515-upstream-release-0.15
🚀 Full E2E won't run until the "ready-to-test" label is applied. I will add it automatically once the PR has 2 approvals, or you can add it manually.

@skitt skitt enabled auto-merge (rebase) May 21, 2024 11:02
@skitt skitt merged commit 9d8c4f5 into submariner-io:release-0.15 May 21, 2024
29 checks passed
@submariner-bot
Copy link
Contributor

🤖 Closed branches: [z_pr518/tpantelis/automated-backport-of-#515-upstream-release-0.15]

@tpantelis tpantelis deleted the automated-backport-of-#515-upstream-release-0.15 branch January 2, 2025 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants