From 269365e1d3540bee60cd9ae85326e5966b83c39f Mon Sep 17 00:00:00 2001 From: Clark Uthayakumar Date: Fri, 1 Aug 2025 11:16:25 +1000 Subject: [PATCH] Configure CVO to delete default-account role binding Adds default-account-cluster-network-operator back to the Cluster Version Operator (CVO) manifests with fixed annotations so that it will be deleted properly. Signed-off-by: Clark Uthayakumar --- ...00_70_cluster-network-operator_02_rbac.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/manifests/0000_70_cluster-network-operator_02_rbac.yaml b/manifests/0000_70_cluster-network-operator_02_rbac.yaml index b400c812dc..0f614e298e 100644 --- a/manifests/0000_70_cluster-network-operator_02_rbac.yaml +++ b/manifests/0000_70_cluster-network-operator_02_rbac.yaml @@ -24,3 +24,21 @@ roleRef: kind: ClusterRole name: cluster-admin apiGroup: rbac.authorization.k8s.io +--- +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: default-account-cluster-network-operator + annotations: + release.openshift.io/delete: "true" + include.release.openshift.io/self-managed-high-availability: "true" + include.release.openshift.io/ibm-cloud-managed: "true" + include.release.openshift.io/single-node-developer: "true" +subjects: +- kind: ServiceAccount + name: default + namespace: openshift-network-operator +roleRef: + kind: ClusterRole + name: cluster-admin + apiGroup: rbac.authorization.k8s.io