Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CRW-4824 Updating annotations for operators to meet new OpenShift requirements #1816

Merged
merged 4 commits into from
Mar 12, 2024

Conversation

SDawley
Copy link
Contributor

@SDawley SDawley commented Mar 11, 2024

What does this PR do?

There are newly implemented requirements (tests became mandatory last week) that requires a change in operator annotations:

https://docs.openshift.com/container-platform/4.15/operators/operator_sdk/osdk-generating-csvs.html#osdk-csv-annotations-infra_osdk-generating-csvs (see table 3)

So I’ve replaced

operators.openshift.io/infrastructure-features: '["disconnected", "proxy-aware",
  	"fips"]'

with

features.operators.openshift.io/disconnected: “true”
features.operators.openshift.io/fips-compliant: “true”
features.operators.openshift.io/proxy-aware: “true”
features.operators.openshift.io/tls-profiles: “true”
features.operators.openshift.io/token-auth-aws: “false” 
features.operators.openshift.io/token-auth-azure: “false” 
features.operators.openshift.io/token-auth-gcp: “false” 

Optional:

features.operators.openshift.io/cnf: “false” 
features.operators.openshift.io/cni: “false” 
features.operators.openshift.io/csi: “false” 

Justifications for true/false:

  • Disconnected, fips and proxy-aware were already set using the old format
  • tls-profiles I set to true because TLS mode is on by default and configurable.
  • aws is false because I found AWS in vendor files but nothing that’s configurable on our end.
  • azure is false because the OpenShift docs specifically mentioned the Cloud Credential Operator which I found no mention of/reference to.
  • gcp is false for the same reason as Azure.
  • cnf is false because I found no references to the Cloud-Native Network Function.
  • cni is false because I only found references to the Container Network Interface in vendor files but nothing configured/configurable by Che.
  • csi is false because like CNI the only references to the Container Storage Interface were in vendor files.

What issues does this PR fix or reference?

https://issues.redhat.com/browse/CRW-4824
Nick created this issue last year.

PR Checklist

As the author of this Pull Request I made sure that:

Reviewers

Reviewers, please comment how you tested the PR when approving it.

Copy link

openshift-ci bot commented Mar 11, 2024

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: SDawley

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tolusha
Copy link
Contributor

tolusha commented Mar 12, 2024

I have some doubts about features.operators.openshift.io/tls-profiles: "true"
I would say it is false accordingly to https://docs.openshift.com/container-platform/4.15/operators/operator_sdk/osdk-generating-csvs.html

tls mode is always true and it isn't configurable.
Or I might misunderstand what configurable is.

Copy link

openshift-ci bot commented Mar 12, 2024

@SDawley: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/v14-che-behind-proxy 3affd69 link true /test v14-che-behind-proxy

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@tolusha tolusha merged commit 9db78ac into main Mar 12, 2024
20 of 21 checks passed
@tolusha tolusha deleted the CRW4824 branch March 12, 2024 16:22
@devstudio-release
Copy link

@devstudio-release
Copy link

@devstudio-release
Copy link

@devstudio-release
Copy link

@devstudio-release
Copy link

Build 3.13 :: copyIIBsToQuay/2541: Console, Changes, Git Data

@devstudio-release
Copy link

Build 3.13 :: sync-to-downstream_3.x/6262: SUCCESS

Build container: devspaces-operator-bundle synced; /DS_CI/get-sources-rhpkg-container-build_3.x/6206 triggered; /job/DS_CI/job/dsc_3.x triggered;

@devstudio-release
Copy link

Build 3.13 :: operator-bundle_3.x/2676: SUCCESS

Upstream sync done; /DS_CI/sync-to-downstream_3.x/6262 triggered

@devstudio-release
Copy link

Build 3.13 :: dsc_3.x/1828: Console, Changes, Git Data

@devstudio-release
Copy link

Build 3.13 :: dsc_3.x/1828: SUCCESS

3.13.0-CI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants