Daniel Messer
Daniel Messer
@awgreene @timflannagan did the RFE make it to the proposal board yet? This seems like a fundamental requirement for ordered tear-down of an operator.
@wslaasya When you publish a newer version of your CRD there are a couple of safe-guards in place that OLM runs before proceeding with the update. Primarily it will try...
@imjasonh Quay.io product manager here. We can certainly look into adding support for the missing types. What specifically does `ko` expect here?
@avinal SPDX and CycloneDX themselves are known formats. The OCI type which is used to ship those SBOMs as an OCI artifact however is not standardized, it depends on the...
@imjasonh sounds good. Yes, we are looking to enable the full list from SigStore.
FYI https://twitter.com/quayio/status/1580121221080891392
One particular aspect of this is the requirement that a sparse index / manifest list has the same digest as the full index / manifest list.
@hedgss Since this is manually applying manifests this can cause issues if we rename or restructure the manifest files that are part of an OLM release. But to be honest...
@adambkaplan easy to add though. We are also planning to drop the mediaType filtering in accordance with OCI.
FWIW, Quay is tracking that here: https://issues.redhat.com/browse/PROJQUAY-5029