operator-controller icon indicating copy to clipboard operation
operator-controller copied to clipboard

Bug: Bundle image source should use ext.Spec.InstallNamespace, not systemNamespace

Open joelanford opened this issue 1 year ago • 1 comments

See: https://github.com/operator-framework/operator-controller/blob/f301f552978ed4997a09e04fbfccc586237461ee/cmd/manager/main.go#L180

This likely means a slight refactoring of the ImageRegistry implementation.

Related: it probably makes sense to stop using the composite unpacker and instead just use ImageRegistry directly.

joelanford avatar Jun 15 '24 13:06 joelanford

/assign

LalatenduMohanty avatar Jun 17 '24 19:06 LalatenduMohanty

ImageRegistry is now being used, but it looks like we still need to fix AuthNamespace:

https://github.com/operator-framework/operator-controller/blob/cf8b866d86bc6e30b3606a8e13dd4ffd6c2b74f0/cmd/manager/main.go#L197-L202

m1kola avatar Aug 27 '24 14:08 m1kola

This namespace is only used when there is image pull secret specified and we currently do not specify it. So as far as I understand - this does not affect anything at the moment. @joelanford or am I missing something?

If we set AuthNamespace to ext.Spec.InstallNamespace this will mean that we will have to create a pull secret for image registry in the ext.Spec.InstallNamespace. Is this what we want to achieve? Oh, and we will also have to have a pull secret support (has to be in line with #1015, I suspect).

m1kola avatar Aug 27 '24 14:08 m1kola

The original idea was that a user would be able to specify an image pull secret on the ClusterExtension object. We don't have that field on our API, which explains why we don't plumb it through to the library.

Perhaps for now, in order to reduce the likelihood of the current unused setup being cargo-culted in the future, we should strip out the unused plumbing and internal API fields (that we control) that accept image pull secret configuration?

joelanford avatar Aug 28 '24 00:08 joelanford