Skip to content

[patch] Add rhoai clusterrole for update SCC#2462

Open
karol-czarnecki wants to merge 16 commits into
masterfrom
masc14954
Open

[patch] Add rhoai clusterrole for update SCC#2462
karol-czarnecki wants to merge 16 commits into
masterfrom
masc14954

Conversation

@karol-czarnecki

@karol-czarnecki karol-czarnecki commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Description:
We are trying to install Red Hat OpenShift AI (RHOAI) 2.25.8 on an OCP 4.2x cluster alongside our other applications.
During deployment we noticed that RHOAI creates a Security Context Constraint named openshift-ai-llminferenceservice-multi-node-scc.

Issue:
two new created SCC with default changes break permissions for PVC in our pipeline

  • openshift-ai-llminferenceservice-multi-node-scc
  • openshift-ai-llminferenceservice-scc

Solution:
Per comments here: https://ibm-cloudplatform.slack.com/archives/C067P31TWQ3/p1782745156816239 we can do workaround as fix from RHOAI is not expected for v2 - we are not sure if for v3. However we need to:

  1. patch existing SCC with this: opendatahub.io/managed: "false" to annotation and labels
  2. patch existing SCC with this: priority: null

above changes are in ansible-devops

@karol-czarnecki karol-czarnecki requested a review from a team as a code owner July 9, 2026 09:57
@karol-czarnecki karol-czarnecki marked this pull request as draft July 9, 2026 09:58
@karol-czarnecki karol-czarnecki changed the title [patch] Add rhoai rbac with minimal permissions [patch] Add rhoai clusterrole for update SCC Jul 10, 2026
@karol-czarnecki karol-czarnecki marked this pull request as ready for review July 10, 2026 11:06

@whitfiea whitfiea left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you update the PR description to state why this is needed as we normally don't what to create clusterroles

@karol-czarnecki

Copy link
Copy Markdown
Contributor Author

Can you update the PR description to state why this is needed as we normally don't what to create clusterroles

Hi @whitfiea description added

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants