Skip to content

Conversation

@yalzhang
Copy link
Contributor

This commit fixes issues that prevented the operator from installing and running correctly via an OLM bundle.

Key changes:

  • Use clusterPermissions in CSV to ensure correct cluster-wide RBAC.
  • Automate RBAC manifests copying and namespace patching in the bundle.
  • Remove USER nobody from Containerfiles to avoid runtime permission errors.

Copy link
Contributor

@Jakob-Naucke Jakob-Naucke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

before testing: can we also drop USER nobody from ./Containerfile (aka the operator containerfile) for consistency?

Copy link
Contributor

@Jakob-Naucke Jakob-Naucke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

otherwise, tested & LGTM

@yalzhang yalzhang force-pushed the fix_bundle branch 2 times, most recently from 59342f6 to 31db15e Compare December 19, 2025 13:42
@yalzhang
Copy link
Contributor Author

yalzhang commented Dec 21, 2025

Tested scenarios below and the resule is expected, attestation pass, vm boot successfully:

  • direct install, start vm in the integration test, reboot vm, destroy and start vm again, pass
  • bundle install, same scenarios as above, pass
  • run the integration test, pass

Copy link
Contributor

@Jakob-Naucke Jakob-Naucke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

one nit, but can already approve

This commit fixes issues that prevented the operator from installing
and running correctly via an OLM bundle.

Key changes:
- Use `clusterPermissions` in CSV to ensure correct cluster-wide RBAC.
- Automate RBAC manifests copying and namespace patching in the bundle.
- Remove `USER nobody` from Containerfiles to avoid runtime permission errors.

Signed-off-by: Yalan Zhang <yalzhang@redhat.com>
@yalzhang
Copy link
Contributor Author

Have ran the integration test and with libvirt vm, the result is as expected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants