OLM complains with "Policy rule not satisfied for service account" about operator-lifecycle-manager HOT 5 CLOSED

What namespace is the CSV in?

Could you try putting SA/Role/RoleBinding/CSV in local-operators instead of local?

from operator-lifecycle-manager.

Ok let me try that.

from operator-lifecycle-manager.

Same issue if I put everything in the local-operators namespace.

from operator-lifecycle-manager.

Sorry for the radio silence @leseb -

1. I installed OLM locally (with make run-local) and used the CSV above.
2. In the status, I saw all of the expected messages about missing requirements
3. I created the serviceaccount, role, and rolebinding that you have here for rook-ceph-osd

Then I looked at the status again and saw the requirement for that serviceaccount, which was previously unsatisfied, correctly flip to Satisfied and Present:

  - dependents:
    - group: rbac.authorization.k8s.io
      kind: PolicyRule
      message: namespaced rule:{"verbs":["get","list","watch","create","update","delete"],"apiGroups":[""],"resources":["configmaps"]}
      status: Satisfied
      version: v1beta1
    group: ""
    kind: ServiceAccount
    message: ""
    name: rook-ceph-osd
    status: Present
    version: v1

There were many additional requirements not met, but those should be able to be satisfied similarly.

from operator-lifecycle-manager.

Ok so I've been able to unlock this. The issue was that I had set clusterPermission instead permissions due a CSV for OCP. Moving on now...

from operator-lifecycle-manager.