Skip to content

rolebinding is errornous #1167

@davidkarlsen

Description

@davidkarlsen

/kind bug

What steps did you take and what happened:
install operator.
observe this rolebinding:

k get rolebinding operand-deployment-lifecycle-manager.v4.3.12 -o yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  creationTimestamp: "2025-05-02T15:11:23Z"
  labels:
    olm.managed: "true"
  name: operand-deployment-lifecycle-manager.v4.3.12
  namespace: ibm-common-services
  ownerReferences:
  - apiVersion: operators.coreos.com/v2
    blockOwnerDeletion: false
    controller: true
    kind: OperatorCondition
    name: operand-deployment-lifecycle-manager.v4.3.12
    uid: b38f8072-4624-4fff-b507-4223dc776af4
  resourceVersion: "5804027002"
  uid: c894626f-b5dd-4405-9179-26a84ef8ad16
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: operand-deployment-lifecycle-manager.v4.3.12
subjects:
- kind: ServiceAccount
  name: operand-deployment-lifecycle-manager
- kind: ServiceAccount
  name: operand-deployment-lifecycle-manager

Note that:

  1. it has a subject duplicate entry
  2. it does not include namespace for the serviceaccount

See https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-binding-examples for reference

What did you expect to happen:
Singular valid subject in the the binding

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

Environment:

  • ODLM version: operand-deployment-lifecycle-manager.v4.3.12
  • Minikube/KIND/OCP version: 4.18.x
  • Kubernetes version: (use kubectl version): v1.31.7
  • OS (e.g. from /etc/os-release): N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions