docs: update documentation for cluster-admin scope

Remove SA-related documentation, tutorials, and demo scripts.
Clean up remaining ServiceAccount references from unit tests.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: pedjak

docs/concepts/controlling-catalog-selection.md

@@ -24,8 +24,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:
@@ -50,8 +48,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:
@@ -72,8 +68,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:
@@ -102,8 +96,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:
@@ -127,8 +119,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:
@@ -226,8 +216,6 @@ If the system cannot resolve to a single bundle due to ambiguity, it will genera
       name: install-my-operator
     spec:
       namespace: my-operator-ns
-      serviceAccount:
-        name: my-operator-installer
       source:
         sourceType: Catalog
         catalog:

docs/concepts/crd-upgrade-safety.md

@@ -62,8 +62,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:

docs/concepts/permission-model.md

@@ -46,8 +46,6 @@ metadata:
   name: <extension_name>
 spec:
   namespace: <namespace>
-  serviceAccount:
-    name: <service_account>
   source:
     sourceType: Catalog
     catalog:
@@ -98,8 +96,6 @@ metadata:
   name: extension-sample
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   source:
     sourceType: Catalog
     catalog:

docs/concepts/upgrade-support.md

@@ -104,8 +104,6 @@ metadata:
   name: my-operator
 spec:
   namespace: my-operator-ns      # <--- Install Namespace
-  serviceAccount:
-    name: my-sa
   config:
     configType: Inline
     inline:
@@ -128,8 +126,6 @@ metadata:
   name: monitor-operator
 spec:
   namespace: ops-system          # <--- Install Namespace
-  serviceAccount:
-    name: monitor-operator-installer
   source:
     sourceType: Catalog
     catalog:
@@ -151,8 +147,6 @@ metadata:
 spec:
   namespace: operators
   # No config provided = Operator watches the entire cluster (AllNamespaces)
-  serviceAccount:
-    name: global-operator-installer
   source:
     sourceType: Catalog
     catalog:

docs/draft/howto/configure-bundles.md

@@ -48,8 +48,6 @@ metadata:
   name: my-operator
 spec:
   namespace: my-namespace
-  serviceAccount:
-    name: my-operator-sa
   source:
     sourceType: Catalog
     catalog:
@@ -236,8 +234,6 @@ metadata:
   name: production-operator
 spec:
   namespace: production-operators
-  serviceAccount:
-    name: production-operator-installer
   source:
     sourceType: Catalog
     catalog:
@@ -344,8 +340,6 @@ metadata:
   name: my-operator
 spec:
   namespace: operators
-  serviceAccount:
-    name: my-operator-installer
   source:
     sourceType: Catalog
     catalog:

docs/draft/howto/customize-operator-deployments.md

@@ -396,8 +396,6 @@ In addition to the OCI registry, you will need a ClusterCatalog in the Kubernete
       namespace: metrics-server-system
     spec:
       namespace: metrics-server-system
-      serviceAccount:
-        name: metrics-server-installer
       source:
         sourceType: Catalog
         catalog:

docs/draft/howto/enable-helm-chart-support.md

@@ -112,8 +112,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   config:
     inline:
       watchNamespace: argocd-watch
@@ -133,8 +131,6 @@ metadata:
   name: argocd
 spec:
   namespace: argocd
-  serviceAccount:
-    name: argocd-installer
   config:
     inline:
       watchNamespace: argocd

docs/draft/howto/rbac-permissions-checking.md

@@ -25,12 +25,11 @@ Here `extension` represents any individual OLMv1 installable, including (but not
 
 *What does it do?*
 
-- Creates enabling infrastructure for extension lifecycle (service accounts, etc.)
+- Creates enabling infrastructure for extension lifecycle (namespaces, etc.)
 - Installs extensions
 - Upgrades extensions
 - Removes extensions
 - Browses extensions offered in installed `ClusterCatalogs`
-- Derives minimum privilege for installation
 - filters visibility on installable extensions
 - Verifies that extension health is detectable to desired sensors