operators/olm: filter RBAC lists by namespace (#3157)

stevekuznetsov · web-flow · commit 58f48dfcaf71 · 2024-01-18T17:11:04.000Z
Signed-off-by: Steve Kuznetsov &lt;skuznets@redhat.com&gt;
diff --git a/pkg/controller/operators/olm/requirements.go b/pkg/controller/operators/olm/requirements.go
@@ -312,7 +312,7 @@ func (a *Operator) permissionStatus(strategyDetailsDeployment *v1alpha1.Strategy
 				} else {
 					permissionMet, err = permissionsPreviouslyCreated[*rbacv1.Role, *rbacv1.RoleBinding](
 						perm, csv,
-						a.lister.RbacV1().RoleLister().List, a.lister.RbacV1().RoleBindingLister().List,
+						a.lister.RbacV1().RoleLister().Roles(namespace).List, a.lister.RbacV1().RoleBindingLister().RoleBindings(namespace).List,
 					)
 				}
 				if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -312,7 +312,7 @@ func (a Operator) permissionStatus(strategyDetailsDeployment v1alpha1.Strategy`
`312`	`312`	`} else {`
`313`	`313`	`permissionMet, err = permissionsPreviouslyCreated[rbacv1.Role, rbacv1.RoleBinding](`
`314`	`314`	`perm, csv,`
`315`		`- a.lister.RbacV1().RoleLister().List, a.lister.RbacV1().RoleBindingLister().List,`
	`315`	`+ a.lister.RbacV1().RoleLister().Roles(namespace).List, a.lister.RbacV1().RoleBindingLister().RoleBindings(namespace).List,`
`316`	`316`	`)`
`317`	`317`	`}`
`318`	`318`	`if err != nil {`