Auditing and securing delegated Operator installations for OpenShift Container Platform

In OpenShift clusters using Operator Lifecycle Manager (OLM Classic), delegating Operator installation to non-administrator users can introduce privilege escalation risks if Operator groups are not strictly scoped. Additionally, failed Operator installations might leave behind elevated cluster role bindings. This article provides manual audit procedures to identify unscoped Operator groups, ve...