diff --git a/pkg/controller/operconfig/operconfig_controller.go b/pkg/controller/operconfig/operconfig_controller.go index 099fe82c6b..12b5557a04 100644 --- a/pkg/controller/operconfig/operconfig_controller.go +++ b/pkg/controller/operconfig/operconfig_controller.go @@ -453,6 +453,21 @@ func (r *ReconcileOperConfig) Reconcile(ctx context.Context, request reconcile.R Name: "openshift-cloud-network-config-controller", }) + // Add cluster-scoped RBAC resources deployed by CVO from static manifests. + // Per OCPBUGS-65488: ClusterRoleBindings must be explicitly listed in relatedObjects + // for 'oc adm inspect clusteroperator/network' to collect them for debugging. + relatedObjects = append(relatedObjects, configv1.ObjectReference{ + Group: "rbac.authorization.k8s.io", + Resource: "clusterrolebindings", + Name: "cluster-network-operator", + }) + + relatedObjects = append(relatedObjects, configv1.ObjectReference{ + Group: "rbac.authorization.k8s.io", + Resource: "clusterrolebindings", + Name: "default-account-cluster-network-operator", + }) + r.status.SetRelatedObjects(relatedObjects) r.status.SetRelatedClusterObjects(relatedClusterObjects) err = r.status.SetMachineConfigs(ctx, renderedMachineConfigs)