Skip to content

Commit f12c1c2

Browse files
authored
Merge pull request #58768 from adellape/console_copiedcsv
2 parents bcbe77b + 4da1afb commit f12c1c2

File tree

1 file changed

+14
-11
lines changed

1 file changed

+14
-11
lines changed

modules/olm-disabling-copied-csvs.adoc

Lines changed: 14 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -6,22 +6,25 @@
66
[id="olm-disabling-copied-csvs_{context}"]
77
= Disabling copied CSVs
88

9-
When an Operator is installed by Operator Lifecycle Manager (OLM), a simplified copy of its cluster service version (CSV) is created in every namespace that the Operator is configured to watch. These CSVs are known as _copied CSVs_ and communicate to users which controllers are actively reconciling resource events in a given namespace.
9+
When an Operator is installed by Operator Lifecycle Manager (OLM), a simplified copy of its cluster service version (CSV) is created by default in every namespace that the Operator is configured to watch. These CSVs are known as _copied CSVs_ and communicate to users which controllers are actively reconciling resource events in a given namespace.
1010

11-
When Operators are configured to use the `AllNamespaces` install mode, versus targeting a single or specified set of namespaces, a copied CSV is created in every namespace on the cluster. On especially large clusters, with namespaces and installed Operators potentially in the hundreds or thousands, copied CSVs consume an untenable amount of resources, such as OLM's memory usage, cluster etcd limits, and networking.
11+
When an Operator is configured to use the `AllNamespaces` install mode, versus targeting a single or specified set of namespaces, a copied CSV for the Operator is created in every namespace on the cluster. On especially large clusters, with namespaces and installed Operators potentially in the hundreds or thousands, copied CSVs consume an untenable amount of resources, such as OLM's memory usage, cluster etcd limits, and networking.
1212

13-
To support these larger clusters, cluster administrators can disable copied CSVs for Operators installed with the `AllNamespaces` mode.
13+
To support these larger clusters, cluster administrators can disable copied CSVs for Operators globally installed with the `AllNamespaces` mode.
1414

15-
[WARNING]
15+
[NOTE]
1616
====
17-
If you disable copied CSVs, a user's ability to discover Operators in the OperatorHub and CLI is limited to Operators installed directly in the user's namespace.
17+
If you disable copied CSVs, an Operator installed in `AllNamespaces` mode has their CSV copied only to the `openshift` namespace, instead of every namespace on the cluster. In disabled copied CSVs mode, the behavior differs between the web console and CLI:
1818
19-
If an Operator is configured to reconcile events in the user's namespace but is installed in a different namespace, the user cannot view the Operator in the OperatorHub or CLI. Operators affected by this limitation are still available and continue to reconcile events in the user's namespace.
20-
21-
This behavior occurs for the following reasons:
22-
23-
* Copied CSVs identify the Operators available for a given namespace.
24-
* Role-based access control (RBAC) scopes the user's ability to view and discover Operators in the OperatorHub and CLI.
19+
* In the web console, the default behavior is modified to show copied CSVs from the `openshift` namespace in every namespace, even though the CSVs are not actually copied to every namespace. This allows regular users to still be able to view the details of these Operators in their namespaces and create related custom resources (CRs).
20+
* In the OpenShift CLI (`oc`), regular users can view Operators installed directly in their namespaces by using the `oc get csvs` command, but the copied CSVs from the `openshift` namespace are not visible in their namespaces. Operators affected by this limitation are still available and continue to reconcile events in the user's namespace.
21+
+
22+
To view a full list of installed global Operators, similar to the web console behavior, all authenticated users can run the following command:
23+
+
24+
[source,terminal]
25+
----
26+
$ oc get csvs -n openshift
27+
----
2528
====
2629

2730
.Procedure

0 commit comments

Comments
 (0)