Craig Trought

Subject Ingress Annotations

7

**Is your feature request related to a problem? Please describe.** Currently [subject fields](https://cert-manager.io/docs/reference/api-docs/#cert-manager.io/v1.X509Subject) are not under the [supported ingress annotations](https://cert-manager.io/docs/usage/ingress/) **Describe the solution you'd like** Add support for subject fields...

support subject and email annotations for ingress/gateway

11

**What this PR does / why we need it**: Adds support for subject/email annotations on ingress/gateways. **Which issue this PR fixes**: fixes #4490 **Release note**: ```release-note NONE ```

adding optional fields to CRD without incrementing api version

2

Is there currently any way to have OLM update a CRD during an operator install where CRD schema has changed, even though the api version remains the same? Use case...

Publish operators on OperatorHub & OpenShift Community Operators

2

**Describe the solution you'd like** Please publish these operators in operator hub and and the openshift community operators repo to be deployed via OLM, this will make them available to...

If a cluster uses [OwnerReferencesPermissionEnforcement](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement) then permission must be granted to finalizers on APIs it manages. https://sdk.operatorframework.io/docs/faqs/#after-deploying-my-operator-why-do-i-see-errors-like-is-forbidden-cannot-set-blockownerdeletion-if-an-ownerreference-refers-to-a-resource-you-cant-set-finalizers-on- We need to update the markers to include this sub resource for `NotificationManagers`.

In OKD/OpenShift hostPath mounts require additional privileges provided through SecurityContextContraints. We'd like to avoid the use of hostPath mounts so we do not need to grant unnecessary privileges to worklodas,...

unable to find a version that was supported for platform darwin/arm64

6

Is controller-runtime tools unsupported on darwin/arm64? ``` make test /Users/ct/git/memcached-operator/bin/controller-gen "crd:trivialVersions=true,preserveUnknownFields=false" rbac:roleName=manager-role webhook paths="./..." output:crd:artifacts:config=config/crd/bases /Users/ct/git/memcached-operator/bin/controller-gen object:headerFile="hack/boilerplate.go.txt" paths="./..." go fmt ./... go vet ./... go: creating new go.mod: module tmp...

Externalize controller argument config

9

**Is your feature request related to a problem? Please describe.** When deploying the operator via OLM w/ CatalogSource and ClusterServiceVersion, modifying the operator deployment directly to include configurable options will...

OpenShift Constraints Category

2

Would the [gatekeeper-library ](https://github.com/open-policy-agent/gatekeeper-library) repo owners be interested in having a category for OpenShift policies (ie. library/openshift) and accept PRs for it?

Add a policy that disallows the following scenarios when deploying `HorizontalPodAutoscalers 1. Deployment of HorizontalPodAutoscalers with `.spec.minReplicas` or `.spec.maxReplicas` outside the ranges defined in the constraint 2. Deployment of HorizontalPodAutoscalers...