|
6 | 6 | [id="olm-disabling-copied-csvs_{context}"]
|
7 | 7 | = Disabling copied CSVs
|
8 | 8 |
|
9 |
| -When an Operator is installed by Operator Lifecycle Manager (OLM), a simplified copy of its cluster service version (CSV) is created in every namespace that the Operator is configured to watch. These CSVs are known as _copied CSVs_ and communicate to users which controllers are actively reconciling resource events in a given namespace. |
| 9 | +When an Operator is installed by Operator Lifecycle Manager (OLM), a simplified copy of its cluster service version (CSV) is created by default in every namespace that the Operator is configured to watch. These CSVs are known as _copied CSVs_ and communicate to users which controllers are actively reconciling resource events in a given namespace. |
10 | 10 |
|
11 |
| -When Operators are configured to use the `AllNamespaces` install mode, versus targeting a single or specified set of namespaces, a copied CSV is created in every namespace on the cluster. On especially large clusters, with namespaces and installed Operators potentially in the hundreds or thousands, copied CSVs consume an untenable amount of resources, such as OLM's memory usage, cluster etcd limits, and networking. |
| 11 | +When an Operator is configured to use the `AllNamespaces` install mode, versus targeting a single or specified set of namespaces, a copied CSV for the Operator is created in every namespace on the cluster. On especially large clusters, with namespaces and installed Operators potentially in the hundreds or thousands, copied CSVs consume an untenable amount of resources, such as OLM's memory usage, cluster etcd limits, and networking. |
12 | 12 |
|
13 |
| -To support these larger clusters, cluster administrators can disable copied CSVs for Operators installed with the `AllNamespaces` mode. |
| 13 | +To support these larger clusters, cluster administrators can disable copied CSVs for Operators globally installed with the `AllNamespaces` mode. |
14 | 14 |
|
15 |
| -[WARNING] |
| 15 | +[NOTE] |
16 | 16 | ====
|
17 |
| -If you disable copied CSVs, a user's ability to discover Operators in the OperatorHub and CLI is limited to Operators installed directly in the user's namespace. |
| 17 | +If you disable copied CSVs, an Operator installed in `AllNamespaces` mode has their CSV copied only to the `openshift` namespace, instead of every namespace on the cluster. In disabled copied CSVs mode, the behavior differs between the web console and CLI: |
18 | 18 |
|
19 |
| -If an Operator is configured to reconcile events in the user's namespace but is installed in a different namespace, the user cannot view the Operator in the OperatorHub or CLI. Operators affected by this limitation are still available and continue to reconcile events in the user's namespace. |
20 |
| -
|
21 |
| -This behavior occurs for the following reasons: |
22 |
| -
|
23 |
| -* Copied CSVs identify the Operators available for a given namespace. |
24 |
| -* Role-based access control (RBAC) scopes the user's ability to view and discover Operators in the OperatorHub and CLI. |
| 19 | +* In the web console, the default behavior is modified to show copied CSVs from the `openshift` namespace in every namespace, even though the CSVs are not actually copied to every namespace. This allows regular users to still be able to view the details of these Operators in their namespaces and create related custom resources (CRs). |
| 20 | +* In the OpenShift CLI (`oc`), regular users can view Operators installed directly in their namespaces by using the `oc get csvs` command, but the copied CSVs from the `openshift` namespace are not visible in their namespaces. Operators affected by this limitation are still available and continue to reconcile events in the user's namespace. |
| 21 | ++ |
| 22 | +To view a full list of installed global Operators, similar to the web console behavior, all authenticated users can run the following command: |
| 23 | ++ |
| 24 | +[source,terminal] |
| 25 | +---- |
| 26 | +$ oc get csvs -n openshift |
| 27 | +---- |
25 | 28 | ====
|
26 | 29 |
|
27 | 30 | .Procedure
|
|
0 commit comments