-
Notifications
You must be signed in to change notification settings - Fork 8
fix(bundle): resolve OLM installation and runtime errors #113
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Jakob-Naucke
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
before testing: can we also drop USER nobody from ./Containerfile (aka the operator containerfile) for consistency?
Jakob-Naucke
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
otherwise, tested & LGTM
59342f6 to
31db15e
Compare
|
Tested scenarios below and the resule is expected, attestation pass, vm boot successfully:
|
Jakob-Naucke
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
one nit, but can already approve
This commit fixes issues that prevented the operator from installing and running correctly via an OLM bundle. Key changes: - Use `clusterPermissions` in CSV to ensure correct cluster-wide RBAC. - Automate RBAC manifests copying and namespace patching in the bundle. - Remove `USER nobody` from Containerfiles to avoid runtime permission errors. Signed-off-by: Yalan Zhang <yalzhang@redhat.com>
|
Have ran the integration test and with libvirt vm, the result is as expected. |
This commit fixes issues that prevented the operator from installing and running correctly via an OLM bundle.
Key changes:
clusterPermissionsin CSV to ensure correct cluster-wide RBAC.USER nobodyfrom Containerfiles to avoid runtime permission errors.