diff --git a/modules/osdk-upgrading-v130-to-v180.adoc b/modules/osdk-upgrading-v130-to-v180.adoc index 9bcd373c0553..29ce11dfde86 100644 --- a/modules/osdk-upgrading-v130-to-v180.adoc +++ b/modules/osdk-upgrading-v130-to-v180.adoc @@ -457,13 +457,9 @@ endif ---- ==== -. Make the following changes to your `config/rbac/service_account.yaml` file: +. Add a `system:controller-manager` service account to your project. A non-default service account `controller-manager` is now generated by the `operator-sdk init` command to improve security for Operators installed in shared namespaces. To add this service account to your existing project, follow these steps: -.. Add a `system:controller-manager` service account to your project. -+ -A non-default service account `controller-manager` is now generated by the `operator-sdk init` command to improve security for Operators installed in shared namespaces. To add this service account to your existing project, follow these steps: - -... Create the `ServiceAccount` definition in a file: +.. Create the `ServiceAccount` definition in a file: + .`config/rbac/service_account.yaml` file [%collapsible] @@ -478,28 +474,28 @@ metadata: ---- ==== -... Add the service account to the list of RBAC resources: +.. Add the service account to the list of RBAC resources: + [source,terminal] ---- $ echo "- service_account.yaml" >> config/rbac/kustomization.yaml ---- -... Update all `RoleBinding` and `ClusterRoleBinding` objects that reference the Operator's service account: +.. Update all `RoleBinding` and `ClusterRoleBinding` objects that reference the Operator's service account: + [source,terminal] ---- $ find config/rbac -name *_binding.yaml -exec sed -i -E 's/ name: default/ name: controller-manager/g' {} \; ---- -... Add the service account name to the manager deployment's `spec.template.spec.serviceAccountName` field: +.. Add the service account name to the manager deployment's `spec.template.spec.serviceAccountName` field: + [source,terminal] ---- $ sed -i -E 's/([ ]+)(terminationGracePeriodSeconds:)/\1serviceAccountName: controller-manager\n\1\2/g' config/manager/manager.yaml ---- -... Verify the changes look like the following diffs: +.. Verify the changes look like the following diffs: + .`config/manager/manager.yaml` file diff [%collapsible]