Chris D. Johnson

Unnecessary *-auth-reader` RoleBinding in kube-system when webhookdefinitions are defined.

1

## Bug Report OLM incorrectly creates a `*-auth-reader` `RoleBinding` in the `kube-system` namespace when the `ClusterServiceVersion` is configured to use a `spec.webhookdefinitions` to auto-install a webhook with the operator. This...

OperatorGroup aggregate roles include wildcards which violate Kubernetes CIS 5.1.3

2

## Feature Request **Is your feature request related to a problem? Please describe.** The OpenShift Compliance Operator includes a CIS Benchmark rule set that enforces the OpenSCAP CIS OpenShift 4...

I'm attempting to run `cert-manager-csi` with cert-manager v0.14.3 on OpenShift 4.4.1. When attempting to deploy the `cert-manager-csi/deploy/example/example-app.yaml`, I get the following error message in the Pod status > Warning FailedMount...

opm registry bundle add accepts invalid properties causing all FBC renderings to fail

3

Problem: Two of our product teams inadvertently added a `properties.yaml` to their bundle that is malformed: ```yaml properties: - type: olm.package ``` This results in all opm commands to fail...

OLM Bundle Unpacker doesn't handle manifest files with invalid Kubernetes object names

1

**Problem:** When creating an operator bundle with manifest filenames with an invalid character, such as a `+`: `myoperator_v1.0.0+mybuild`, the unpacker job attempts to fix these invalid names by replacing the...

Bundle Unpacker is not idempotent

1

**Problem:** On OpenShift 4.9.17, A customer turned on a ResourceQuota on the `openshift-marketplace` namespace which is the main namespace for OLM. ```yaml kind: ResourceQuota apiVersion: v1 metadata: name: temp-pod-quota namespace:...

opm registry add doesn't detect dependencies.yaml problems

3

See https://github.com/operator-framework/operator-lifecycle-manager/issues/1770 for details. Summary: When using `opm registry add` or `opm index add` 1. When the schema format of dependencies.yaml is invalid, there is no error or warning. 2....

Clarify which File Based Catalog data is source of truth

4

File Based Catalogs (FBCs) allow overriding all sorts of values that are normally supplied by the bundle. Can we clearly define what is safe to override? I can infer from...

opm: sign release binaries

5

Provide a digest and signature for the built binaries: 1. Clients can verify that the binary is unaltered 1. Clients can verify that the binary is authentic

The GRPC server in opm produces random channel order for FBC catalogs

2

We have a large catalog. We just converted it from sqlite to fbc: FBC: `icr.io/cpopen/ibm-operator-catalog:latest` SQLITE: `icr.io/cpopen/ibm-operator-catalog:sqlite-latest` It looks like the order in which the channels are being returned via...