mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
16 lines
946 B
Plaintext
16 lines
946 B
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * operators/admin/olm-creating-policy.adoc
|
|
|
|
:_mod-docs-content-type: REFERENCE
|
|
[id="olm-policy-workflow_{context}"]
|
|
= Installation workflow
|
|
|
|
When an Operator group is tied to a service account and an Operator is installed or upgraded, Operator Lifecycle Manager (OLM) uses the following workflow:
|
|
|
|
. The given `Subscription` object is picked up by OLM.
|
|
. OLM fetches the Operator group tied to this subscription.
|
|
. OLM determines that the Operator group has a service account specified.
|
|
. OLM creates a client scoped to the service account and uses the scoped client to install the Operator. This ensures that any permission requested by the Operator is always confined to that of the service account in the Operator group.
|
|
. OLM creates a new service account with the set of permissions specified in the CSV and assigns it to the Operator. The Operator runs as the assigned service account.
|