[enterprise-4.11] Issue in file operators/admin/olm-creating-policy.adoc

Which section(s) is the issue in?

Allowing non-cluster administrators to install Operators

What needs fixing?

The title of the section is misleading. The instructions there do not grant any permission to any user or group. They are about limiting permissions to an application, that is, to an operator. Operators run, by default, with full cluster administator privileges and these instructions show how to run an operator with more restrictive privileges.

Though runnig operators with limited privileges is necessary for the use case stated in the title, else "regular" users could use operators to escalate their own privileges, I cannot see instructions on how to enable non-cluster administrator users to install operators nor how the ensure these users can only run operators under restricted privileges.

Start with operators/admin/olm-creating-policy.adoc and the “Allowing non-cluster administrators to install Operators” section. Compare the section title with the instructions about restricting operator permissions, then determine whether the missing installation guidance is in scope. Done means the title and content accurately describe the procedure, including the permission boundaries for non-cluster administrators.