Add operator lifecycle metadata to installed operators table#16428
Draft
perdasilva wants to merge 1 commit into
Draft
Add operator lifecycle metadata to installed operators table#16428perdasilva wants to merge 1 commit into
perdasilva wants to merge 1 commit into
Conversation
openshift-ci
Bot
added
the
do-not-merge/work-in-progress
Contributor
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: perdasilva The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
openshift-ci
Bot
added
component/olm
Contributor
📝 WalkthroughWalkthroughThis pull request adds operator lifecycle metadata support to OpenShift Console. It introduces a new gRPC-based backend endpoint that fetches lifecycle data from Operator Registry, adds a tech-preview feature flag to gate the functionality, implements a React hook with in-memory caching and request deduplication to consume the endpoint, and integrates new "Cluster Compatibility" and "Support" columns into the Installed Operators table. The columns render compatibility status (compatible/incompatible/no-data) and support phase information with formatted tooltips. RBAC is restricted via ClusterRole/ClusterRoleBinding. UI text is localized and column visibility is controlled via user preferences. 🚥 Pre-merge checks | ✅ 11 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (11 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Tip 💬 Introducing Slack Agent: The best way for teams to turn conversations into code.Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.
Built for teams:
One agent for your entire SDLC. Right inside Slack. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 6
🧹 Nitpick comments (10)
contrib/lifecycle-rbac.yaml (1)
1-6: 💤 Low valueDocumentation comment may be outdated.
The comment references "lifecycle-server API" and authentication via TokenReview/SubjectAccessReview, but the implementation in
pkg/olm/lifecycle.godirectly dials the CatalogSource gRPC service without a separate lifecycle-server. Consider updating to reflect the actual architecture:# RBAC required for the OpenShift Console to access the lifecycle metadata API. # # The console backend proxies lifecycle metadata requests by dialing # CatalogSource gRPC services directly. This RBAC grants the console # ServiceAccount permission to access the /api/olm/lifecycle/* endpoints.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@contrib/lifecycle-rbac.yaml` around lines 1 - 6, Update the top comment in contrib/lifecycle-rbac.yaml to reflect current architecture: replace the outdated "lifecycle-server API" and TokenReview/SubjectAccessReview description with wording that the console backend proxies lifecycle metadata by dialing CatalogSource gRPC services directly and that this RBAC grants the console ServiceAccount permission to access the /api/olm/lifecycle/* endpoints (refer to implementation in pkg/olm/lifecycle.go for the actual flow).pkg/olm/lifecycle_test.go (3)
96-131: 💤 Low valueConsider adding test case for non-gRPC errors.
handleGRPCErrorhas a fallback path whengrpcstatus.FromErrorreturnsok=false(e.g., for plain Go errors). Adding a test case for this branch improves coverage:{ name: "non-gRPC error returns 502", err: fmt.Errorf("plain error"), expectedStatus: http.StatusBadGateway, },🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle_test.go` around lines 96 - 131, Add a test case to TestHandleGRPCError that covers the non-gRPC fallback by invoking handleGRPCError with a plain Go error (e.g., fmt.Errorf("plain error")) and asserting it returns http.StatusBadGateway; update the imports in lifecycle_test.go to include "fmt" if not present and add the test case entry (name "non-gRPC error returns 502", err fmt.Errorf(...), expectedStatus http.StatusBadGateway) to the tests slice so the branch where grpcstatus.FromError returns ok=false is exercised.
69-94: 💤 Low valueConsider adding test for missing packageName validation.
The validation tests cover invalid namespace and catalog names but not the empty
packageNamecase. SincelifecycleHandlerexplicitly validates this (returning 400), it's worth testing:t.Run("rejects empty packageName", func(t *testing.T) { // Note: This requires a route that allows empty packageName to reach handler // or testing the handler directly with a mock request req := httptest.NewRequest("GET", "/api/olm/lifecycle/openshift-marketplace/redhat-operators/", nil) rr := httptest.NewRecorder() mux.ServeHTTP(rr, req) assert.Equal(t, http.StatusBadRequest, rr.Code) })🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle_test.go` around lines 69 - 94, Add a test case to TestOLMHandler_lifecycleHandler_validation that asserts lifecycleHandler rejects an empty packageName: create a subtest "rejects empty packageName" that sends a GET request with an empty final segment (e.g. "/api/olm/lifecycle/openshift-marketplace/redhat-operators/") and verifies http.StatusBadRequest; if the ServeMux route prevents matching an empty segment, call handler.lifecycleHandler directly with an httptest.NewRequest whose URL.Path ends without a package name and a ResponseRecorder, or construct the request so the handler receives an empty packageName value, then assert rr.Code == http.StatusBadRequest.
42-67: 💤 Low valueGood edge case coverage. Consider adding a few more cases.
The validation tests cover important security cases (path traversal, domain injection). Consider adding:
- A test for exactly 63 characters (max valid length per DNS-label spec)
- A test for numeric-only names like
"123"which should be valid{"a23456789012345678901234567890123456789012345678901234567890123", true}, // 63 chars - max valid {"123", true}, // numeric-only is valid per DNS label🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle_test.go` around lines 42 - 67, Add two more table-driven cases to TestIsValidK8sName: a 63-character string and a numeric-only name "123". Update the tests slice in TestIsValidK8sName to include {"a23456789012345678901234567890123456789012345678901234567890123", true} and {"123", true}, then run the subtests that call isValidK8sName to verify both are treated as valid by the validator.pkg/olm/lifecycle.go (4)
98-101: 💤 Low valueHandle write error for observability.
The error from
w.Writeis discarded. While the response is already committed, logging the error aids debugging network issues:w.Header().Set("Content-Type", "application/json") w.WriteHeader(http.StatusOK) - w.Write(jsonBytes) + if _, err := w.Write(jsonBytes); err != nil { + klog.Errorf("[lifecycle] Failed to write response: %v", err) + } }🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle.go` around lines 98 - 101, The call to w.Write(jsonBytes) currently discards its returned error which hurts observability; update the handler (the block that sets Content-Type and writes jsonBytes to the http.ResponseWriter) to capture the error from w.Write(jsonBytes) and log it (include context such as the endpoint/operation and the jsonBytes length) using the package's logger (or log.Printf/klog) so network/write failures are observable; keep the existing w.WriteHeader(http.StatusOK) behavior but ensure the write error is checked and logged.
38-38: 💤 Low valueConsider using debug-level logging for routine request tracing.
Per coding guidelines, use
klog.V(4)for debug logging. Logging every incoming request at Info level can be noisy in production. Reserve Info for significant events.- klog.Infof("[lifecycle] Received request: catalogNamespace=%q catalogName=%q packageName=%q", catalogNamespace, catalogName, packageName) + klog.V(4).Infof("[lifecycle] Received request: catalogNamespace=%q catalogName=%q packageName=%q", catalogNamespace, catalogName, packageName)Same applies to lines 59 and 97 for dial target logging and successful responses.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle.go` at line 38, Change the three routine request/response Info logs to debug-level per guidelines: replace the klog.Infof calls that log incoming request (the call with catalogNamespace, catalogName, packageName), the dial-target logging call (the log that prints the dial target), and the successful response log with klog.V(4).Infof so they become verbose-level debug messages; keep the same message text and formatting but use klog.V(4).Infof to reduce noise in production.
52-56: ⚡ Quick winConsider validating
packageNameformat for consistency.
catalogNamespaceandcatalogNameare validated against the DNS-label regex, butpackageNameonly checks for empty. OLM package names typically follow similar naming conventions. Consider applying the same validation for defense in depth:if packageName == "" { klog.Infof("[lifecycle] Missing packageName") serverutils.SendResponse(w, http.StatusBadRequest, serverutils.ApiError{Err: "packageName is required"}) return } + + if !isValidK8sName(packageName) { + klog.Infof("[lifecycle] Invalid packageName: %q", packageName) + serverutils.SendResponse(w, http.StatusBadRequest, serverutils.ApiError{Err: "invalid packageName"}) + return + }🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle.go` around lines 52 - 56, packageName is only checked for emptiness while catalogNamespace and catalogName use DNS-label validation; apply the same DNS-label check to packageName by reusing the existing validation logic used for catalogNamespace/catalogName (the same regex or helper function) and return the same http.StatusBadRequest via serverutils.SendResponse with a clear error like "packageName must be a valid DNS-1123 label"; also log the failure with klog.Infof similar to the other validations.
61-67: ⚡ Quick winConsider adding dial options for resilience.
The gRPC client is created without explicit timeout constraints. While
grpc.NewClientis non-blocking by default andstream.Recv()respects the request context, consider adding dial options for defensive programming:- conn, err := grpc.NewClient(target, grpc.WithTransportCredentials(insecure.NewCredentials())) + conn, err := grpc.NewClient(target, + grpc.WithTransportCredentials(insecure.NewCredentials()), + grpc.WithDefaultCallOptions(grpc.WaitForReady(false)), + )This ensures the client fails fast if the service is unavailable rather than potentially waiting for connection establishment.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@pkg/olm/lifecycle.go` around lines 61 - 67, The gRPC client dial currently calls grpc.NewClient(target, grpc.WithTransportCredentials(insecure.NewCredentials())) without blocking/timeout/backoff options; update the call that creates the connection (the grpc.NewClient invocation that returns conn, err) to use dial options that enforce a finite dial timeout and clearer failure semantics (e.g., use a context with timeout for the dial, add grpc.WithBlock() and grpc.WithReturnConnectionError(), and configure connect params/backoff via grpc.WithConnectParams) so the dial fails fast when the service is unreachable and returns a meaningful error to the existing klog.Errorf and serverutils.SendResponse paths.frontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsx (1)
372-402: ⚡ Quick winDrop the lifecycle
console.logs before merge.These execute on every installed-operator row render and dump large objects like
lifecycleData, so a busy table will spam production consoles and add avoidable work in an already hot render path.Also applies to: 585-595
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@frontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsx` around lines 372 - 402, Remove the debug console.log statements that log lifecycle params/results from clusterserviceversion.tsx to avoid spamming renders; specifically delete the two console.log blocks surrounding the useOperatorLifecycle hook and lifecycle result (the blocks that reference '[lifecycle-csv-row] Lifecycle params:' and '[lifecycle-csv-row] Lifecycle result:' and print lifecycleData, clusterVersion, compatible, supportPhase, etc.). Ensure you do not change logic that calls useOperatorLifecycle, getClusterVersion, getClusterCompatibility, or getSupportPhase—only remove the console.log lines (also remove the duplicate logs around lines 585-595 noted in the comment).frontend/packages/operator-lifecycle-manager/src/hooks/useOperatorLifecycle.ts (1)
93-148: ⚡ Quick winPlease remove the fetch-debug logging from this hook.
Once the installed-operators table mounts several lifecycle hooks, these logs will get very noisy very quickly. If you still need them while iterating, please gate them behind a dev-only logger instead of shipping raw
console.log/console.error.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@frontend/packages/operator-lifecycle-manager/src/hooks/useOperatorLifecycle.ts` around lines 93 - 148, Remove the ad-hoc console logging in the useOperatorLifecycle hook: eliminate all console.log and console.error calls inside the useOperatorLifecycle function (including the initial call logging packageName/catalogName/catalogNamespace, the "Skipping fetch" branch, the "Fetching", "Fetch success" and "Fetch error" logs inside the useEffect, and any related debug prints around fetchLifecycleData/abortRef). If you still need runtime debug output during local development, replace those calls with a dev-only logger wrapper (checked by NODE_ENV or a dev flag) instead of shipping raw console calls, keeping the rest of the logic (buildCacheKey, lifecycleCache lookup, fetchLifecycleData handling, and abortRef usage) unchanged.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@contrib/lifecycle-rbac.yaml`:
- Around line 17-18: The nonResourceURLs entry currently uses an overly broad
pattern "/api/*/lifecycles/*"; update the nonResourceURLs value to the specific
route used by the service (e.g. "/api/olm/lifecycle/*") so the RBAC rule only
matches the intended endpoint—modify the nonResourceURLs array item (the string
literal) to the tightened pattern to follow least privilege.
In
`@frontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsx`:
- Around line 25-29: The file currently imports ColumnLayout, WatchK8sResource,
and WatchK8sResultsObject from the package index '@console/dynamic-plugin-sdk';
change that to import each type from its concrete module path within the
dynamic-plugin-sdk (i.e., replace the single-barrel import at the top of
clusterserviceversion.tsx with individual imports that reference the specific
module files that export ColumnLayout, WatchK8sResource, and
WatchK8sResultsObject), ensuring you only update the import statement(s) and
keep the symbol names (ColumnLayout, WatchK8sResource, WatchK8sResultsObject)
unchanged where they are used.
In
`@frontend/packages/operator-lifecycle-manager/src/components/operator-lifecycle-status.tsx`:
- Around line 97-106: The phase date strings (phase.timeBegin / phase.timeEnd)
are being parsed with new Date('YYYY-MM-DD') which yields UTC midnight and
causes timezone-dependent boundary errors; instead parse the YYYY-MM-DD strings
into local calendar-day boundaries and compare against now: for each phase in
allPhases convert timeBegin into a local start-of-day (new Date(year, month-1,
day) or equivalent) and convert timeEnd into the local end-of-day (set to
23:59:59.999) before computing begin/end, then use now >= begin && now <= end;
update the same parsing logic used around the other block (lines referenced
141-147) so all comparisons treat dates as local calendar dates rather than UTC
instants.
In `@go.mod`:
- Line 242: Remove the workstation-local replace entry for the module
"github.com/operator-framework/operator-registry" (which currently points to an
absolute path) and replace it with a reachable module reference such as an
official tagged version, a git tag/ref, or a pseudo-version (avoid absolute
filesystem paths); also verify the intentionality of the Docker module pins (the
pinned "v27.5.0+incompatible" entries) and either keep them with a comment
explaining why they must be downgraded or update them to the desired versions
consistent with transitive dependency resolution.
In `@pkg/olm/lifecycle.go`:
- Line 9: The go.mod replace directive pointing to a local filesystem path must
be removed or replaced with a persistent public fork URL so CI and other devs
can build; locate the replace entry in go.mod and either delete it or change it
to a public Git remote (e.g., github.com/<your-fork>/operator-registry vX.Y.Z)
and run `go mod tidy`; also reconcile use of the fork-only API GetCustomSchemas
in lifecycle.go by either removing or replacing calls to GetCustomSchemas (or
wrapping them behind a compat shim) if you intend to track upstream, or ensure
the go.mod replace references your public fork that actually implements
GetCustomSchemas so the symbol resolves.
---
Nitpick comments:
In `@contrib/lifecycle-rbac.yaml`:
- Around line 1-6: Update the top comment in contrib/lifecycle-rbac.yaml to
reflect current architecture: replace the outdated "lifecycle-server API" and
TokenReview/SubjectAccessReview description with wording that the console
backend proxies lifecycle metadata by dialing CatalogSource gRPC services
directly and that this RBAC grants the console ServiceAccount permission to
access the /api/olm/lifecycle/* endpoints (refer to implementation in
pkg/olm/lifecycle.go for the actual flow).
In
`@frontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsx`:
- Around line 372-402: Remove the debug console.log statements that log
lifecycle params/results from clusterserviceversion.tsx to avoid spamming
renders; specifically delete the two console.log blocks surrounding the
useOperatorLifecycle hook and lifecycle result (the blocks that reference
'[lifecycle-csv-row] Lifecycle params:' and '[lifecycle-csv-row] Lifecycle
result:' and print lifecycleData, clusterVersion, compatible, supportPhase,
etc.). Ensure you do not change logic that calls useOperatorLifecycle,
getClusterVersion, getClusterCompatibility, or getSupportPhase—only remove the
console.log lines (also remove the duplicate logs around lines 585-595 noted in
the comment).
In
`@frontend/packages/operator-lifecycle-manager/src/hooks/useOperatorLifecycle.ts`:
- Around line 93-148: Remove the ad-hoc console logging in the
useOperatorLifecycle hook: eliminate all console.log and console.error calls
inside the useOperatorLifecycle function (including the initial call logging
packageName/catalogName/catalogNamespace, the "Skipping fetch" branch, the
"Fetching", "Fetch success" and "Fetch error" logs inside the useEffect, and any
related debug prints around fetchLifecycleData/abortRef). If you still need
runtime debug output during local development, replace those calls with a
dev-only logger wrapper (checked by NODE_ENV or a dev flag) instead of shipping
raw console calls, keeping the rest of the logic (buildCacheKey, lifecycleCache
lookup, fetchLifecycleData handling, and abortRef usage) unchanged.
In `@pkg/olm/lifecycle_test.go`:
- Around line 96-131: Add a test case to TestHandleGRPCError that covers the
non-gRPC fallback by invoking handleGRPCError with a plain Go error (e.g.,
fmt.Errorf("plain error")) and asserting it returns http.StatusBadGateway;
update the imports in lifecycle_test.go to include "fmt" if not present and add
the test case entry (name "non-gRPC error returns 502", err fmt.Errorf(...),
expectedStatus http.StatusBadGateway) to the tests slice so the branch where
grpcstatus.FromError returns ok=false is exercised.
- Around line 69-94: Add a test case to
TestOLMHandler_lifecycleHandler_validation that asserts lifecycleHandler rejects
an empty packageName: create a subtest "rejects empty packageName" that sends a
GET request with an empty final segment (e.g.
"/api/olm/lifecycle/openshift-marketplace/redhat-operators/") and verifies
http.StatusBadRequest; if the ServeMux route prevents matching an empty segment,
call handler.lifecycleHandler directly with an httptest.NewRequest whose
URL.Path ends without a package name and a ResponseRecorder, or construct the
request so the handler receives an empty packageName value, then assert rr.Code
== http.StatusBadRequest.
- Around line 42-67: Add two more table-driven cases to TestIsValidK8sName: a
63-character string and a numeric-only name "123". Update the tests slice in
TestIsValidK8sName to include
{"a23456789012345678901234567890123456789012345678901234567890123", true} and
{"123", true}, then run the subtests that call isValidK8sName to verify both are
treated as valid by the validator.
In `@pkg/olm/lifecycle.go`:
- Around line 98-101: The call to w.Write(jsonBytes) currently discards its
returned error which hurts observability; update the handler (the block that
sets Content-Type and writes jsonBytes to the http.ResponseWriter) to capture
the error from w.Write(jsonBytes) and log it (include context such as the
endpoint/operation and the jsonBytes length) using the package's logger (or
log.Printf/klog) so network/write failures are observable; keep the existing
w.WriteHeader(http.StatusOK) behavior but ensure the write error is checked and
logged.
- Line 38: Change the three routine request/response Info logs to debug-level
per guidelines: replace the klog.Infof calls that log incoming request (the call
with catalogNamespace, catalogName, packageName), the dial-target logging call
(the log that prints the dial target), and the successful response log with
klog.V(4).Infof so they become verbose-level debug messages; keep the same
message text and formatting but use klog.V(4).Infof to reduce noise in
production.
- Around line 52-56: packageName is only checked for emptiness while
catalogNamespace and catalogName use DNS-label validation; apply the same
DNS-label check to packageName by reusing the existing validation logic used for
catalogNamespace/catalogName (the same regex or helper function) and return the
same http.StatusBadRequest via serverutils.SendResponse with a clear error like
"packageName must be a valid DNS-1123 label"; also log the failure with
klog.Infof similar to the other validations.
- Around line 61-67: The gRPC client dial currently calls grpc.NewClient(target,
grpc.WithTransportCredentials(insecure.NewCredentials())) without
blocking/timeout/backoff options; update the call that creates the connection
(the grpc.NewClient invocation that returns conn, err) to use dial options that
enforce a finite dial timeout and clearer failure semantics (e.g., use a context
with timeout for the dial, add grpc.WithBlock() and
grpc.WithReturnConnectionError(), and configure connect params/backoff via
grpc.WithConnectParams) so the dial fails fast when the service is unreachable
and returns a meaningful error to the existing klog.Errorf and
serverutils.SendResponse paths.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository YAML (base), Central YAML (inherited)
Review profile: CHILL
Plan: Enterprise
Run ID: dfea84d5-aae7-4cc6-b70b-037dac55f937
⛔ Files ignored due to path filters (286)
go.sumis excluded by!**/*.sumvendor/cel.dev/expr/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/MODULE.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/checked.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/eval.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/explain.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/syntax.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/value.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/dario.cat/mergo/README.mdis excluded by!**/vendor/**,!vendor/**vendor/dario.cat/mergo/SECURITY.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/AdaLogics/go-fuzz-headers/consumer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/internal/byteutil/byteutil.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/ocb/ocb.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/armor/encode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/errors/errors.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/aead_crypter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/aead_encrypted.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/config.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/public_key.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/signature.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/ProtonMail/go-crypto/openpgp/packet/symmetrically_encrypted_aead.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/antlrdoc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/atn.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/atn_config.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/input_stream.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/jcollect.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/lexer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/ll1_analyzer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/parser_atn_simulator.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/prediction_context.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/recognizer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/statistics.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/token.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/antlr4-go/antlr/v4/utils.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/dh/x25519/curve_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/dh/x448/curve_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/ecc/goldilocks/curve.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/internal/conv/conv.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/math/fp25519/fp_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/math/fp448/fp_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/sign/ed25519/point.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/sign/ed448/ed448.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/cloudflare/circl/sign/sign.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/containerd/containerd/version/version.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/docker/docker-credential-helpers/client/command.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/docker/go-connections/tlsconfig/config.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/docker/go-connections/tlsconfig/config_client_ciphers.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/.travis.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/CHANGES.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/curly.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/custom_verb.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/emicklei/go-restful/v3/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/fs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/helper/chroot/chroot.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/memfs/memory.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/memfs/storage.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/osfs/os_bound.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-billy/v5/osfs/os_chroot.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/format/idxfile/idxfile.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/object/commit.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/transport/common.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/transport/http/common.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/transport/http/transport.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/transport/ssh/auth_method.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/plumbing/transport/ssh/common.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/remote.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/repository.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/utils/merkletrie/change.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/utils/merkletrie/difftree.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/utils/merkletrie/index/node.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/worktree.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-git/go-git/v5/worktree_status.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonpointer/.gitignoreis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonpointer/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonpointer/LICENSEis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonpointer/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonpointer/pointer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonreference/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonreference/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonreference/internal/normalize_url.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/jsonreference/reference.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/BENCHMARK.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/convert.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/convert_types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/file.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/initialism_index.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/json.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/loading.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/name_lexem.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/net.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/path.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/split.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/string_bytes.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/util.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/go-openapi/swag/yaml.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/mock/gomock/call.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/golang/mock/gomock/controller.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/env.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/folding.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/library.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/optimizer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/program.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/templates/authoring.tmplis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/cel/validator.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/checker/checker.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/checker/env.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/checker/scopes.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/ast/ast.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/debug/debug.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/env/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/env/env.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/bool.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/bytes.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/double.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/duration.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/int.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/json_value.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/list.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/map.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/null.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/object.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/pb/type.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/string.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/timestamp.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/common/types/uint.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/interpreter/attribute_patterns.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/interpreter/attributes.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/interpreter/interpretable.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/interpreter/interpreter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/interpreter/planner.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/cel-go/parser/helper.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/gnostic-models/extensions/extension.protois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.protois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.protois excluded by!**/vendor/**,!vendor/**vendor/github.com/google/gnostic-models/openapiv3/annotations.protois excluded by!**/vendor/**,!vendor/**vendor/github.com/hashicorp/go-retryablehttp/.go-versionis excluded by!**/vendor/**,!vendor/**vendor/github.com/hashicorp/go-retryablehttp/CODEOWNERSis excluded by!**/vendor/**,!vendor/**vendor/github.com/hashicorp/go-retryablehttp/Makefileis excluded by!**/vendor/**,!vendor/**vendor/github.com/hashicorp/go-retryablehttp/client.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/josharian/intern/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/josharian/intern/intern.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/josharian/intern/license.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/README.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/fse/bitwriter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/fse/compress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/bitwriter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/compress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/decompress_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/huff0/huff0.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/internal/le/unsafe_disabled.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/internal/le/unsafe_enabled.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/internal/snapref/decode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/internal/snapref/encode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/bitwriter.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/blockdec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/decoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/decoder_options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/dict.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_base.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_best.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_better.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_dfast.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/enc_fast.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/encoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/encoder_options.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/framedec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/fse_encoder.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/seqdec_amd64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/snappy.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/zip.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/klauspost/compress/zstd/zstd.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/LICENSEis excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/buffer/pool.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/jlexer/bytestostr.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/jlexer/bytestostr_nounsafe.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/jlexer/error.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/jlexer/lexer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mailru/easyjson/jwriter/writer.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mattn/go-runewidth/runewidth.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/mattn/go-runewidth/runewidth_windows.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/api/pkg/operators/v1alpha1/catalogsource_types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/api/pkg/operators/v1alpha1/clusterserviceversion_types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/api/pkg/operators/v1alpha1/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/api/pkg/operators/v1alpha1/subscription_types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/api/pkg/operators/v1alpha1/zz_generated.deepcopy.gois excluded by!**/vendor/**,!vendor/**,!**/zz_generated*vendor/github.com/operator-framework/operator-registry/alpha/declcfg/declcfg.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/declcfg/declcfg_to_model.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/declcfg/load.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/declcfg/model_to_declcfg.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/declcfg/write.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/model/error.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/model/model.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/alpha/property/property.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/api/api_to_model.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/api/model_to_api.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/api/registry.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/api/registry.protois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/api/registry_grpc.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/image/mock.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/lib/semver/semver.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/prettyunmarshaler/prettyunmarshaler.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/bundle.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/bundlegraphloader.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/channelupdateoptions.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/conversion.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/csv.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/decode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/directoryGraphLoader.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/empty.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/graph.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/imageinput.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/parse.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/populator.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/registry_to_model.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/operator-framework/operator-registry/pkg/registry/types.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/Dockerfile.armis excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/Dockerfile.arm64is excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/LICENSEis excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/Makefileis excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/sha1cd.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/sha1cdblock_amd64.sis excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/ubc/check.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/pjbgf/sha1cd/ubc/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/decode.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/expfmt.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/fuzz.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/openmetrics_create.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/text_create.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/common/expfmt/text_parse.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/Makefileis excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/Makefile.commonis excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/arp.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/buddyinfo.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cmdline.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_armx.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_loong64.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_mipsx.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_others.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_ppcx.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_riscvx.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_s390x.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/cpuinfo_x86.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/crypto.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/doc.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/fs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/fs_statfs_notype.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/fs_statfs_type.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/fscache.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/fs/fs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/util/parse.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/util/readfile.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/util/sysreadfile.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/util/sysreadfile_compat.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/internal/util/valueparser.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/ipvs.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/kernel_random.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/loadavg.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/mdstat.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/meminfo.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/mountinfo.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/mountstats.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_conntrackstat.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_dev.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_dev_snmp6.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_ip_socket.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_protocols.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_route.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_sockstat.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_softnet.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_tcp.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_tls_stat.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_udp.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_unix.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_wireless.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/prometheus/procfs/net_xfrm.gois excluded by!**/vendor/**,!vendor/**
📒 Files selected for processing (14)
contrib/lifecycle-rbac.yamlfrontend/packages/operator-lifecycle-manager/console-extensions.jsonfrontend/packages/operator-lifecycle-manager/locales/en/olm.jsonfrontend/packages/operator-lifecycle-manager/package.jsonfrontend/packages/operator-lifecycle-manager/src/components/__tests__/operator-lifecycle-status.spec.tsxfrontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsxfrontend/packages/operator-lifecycle-manager/src/components/operator-lifecycle-status.tsxfrontend/packages/operator-lifecycle-manager/src/const.tsfrontend/packages/operator-lifecycle-manager/src/features.tsfrontend/packages/operator-lifecycle-manager/src/hooks/useOperatorLifecycle.tsgo.modpkg/olm/handler.gopkg/olm/lifecycle.gopkg/olm/lifecycle_test.go
Comment on lines
+17
to
+18
| - nonResourceURLs: | ||
| - "/api/*/lifecycles/*" |
Contributor
There was a problem hiding this comment.
The nonResourceURLs pattern is broader than necessary.
The pattern "/api/*/lifecycles/*" would match any API path containing /lifecycles/, but the actual endpoint is /api/olm/lifecycle/.... Consider tightening to match the specific route:
- nonResourceURLs:
- - "/api/*/lifecycles/*"
+ - "/api/olm/lifecycle/*"
verbs:
- "get"This follows the principle of least privilege and prevents unintended access to future endpoints that might match the broader pattern.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@contrib/lifecycle-rbac.yaml` around lines 17 - 18, The nonResourceURLs entry
currently uses an overly broad pattern "/api/*/lifecycles/*"; update the
nonResourceURLs value to the specific route used by the service (e.g.
"/api/olm/lifecycle/*") so the RBAC rule only matches the intended
endpoint—modify the nonResourceURLs array item (the string literal) to the
tightened pattern to follow least privilege.
Comment on lines
+25
to
+29
| import type { | ||
| ColumnLayout, | ||
| WatchK8sResource, | ||
| WatchK8sResultsObject, | ||
| } from '@console/dynamic-plugin-sdk'; |
Contributor
There was a problem hiding this comment.
🛠️ Refactor suggestion | 🟠 Major | ⚡ Quick win
Avoid adding new barrel imports from @console/dynamic-plugin-sdk.
These new type imports come from the package index, which this repo explicitly avoids in new TS/TSX code because it obscures dependency edges and has caused circular-build issues before. Please import them from their concrete module paths instead.
As per coding guidelines, "Never import from package index files (e.g., @console/shared) in new code; import from specific file paths instead to avoid circular dependencies and slow builds".
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In
`@frontend/packages/operator-lifecycle-manager/src/components/clusterserviceversion.tsx`
around lines 25 - 29, The file currently imports ColumnLayout, WatchK8sResource,
and WatchK8sResultsObject from the package index '@console/dynamic-plugin-sdk';
change that to import each type from its concrete module path within the
dynamic-plugin-sdk (i.e., replace the single-barrel import at the top of
clusterserviceversion.tsx with individual imports that reference the specific
module files that export ColumnLayout, WatchK8sResource, and
WatchK8sResultsObject), ensuring you only update the import statement(s) and
keep the symbol names (ColumnLayout, WatchK8sResource, WatchK8sResultsObject)
unchanged where they are used.
Comment on lines
+97
to
+106
| for (const phase of allPhases) { | ||
| const begin = new Date(phase.timeBegin).getTime(); | ||
| const end = new Date(phase.timeEnd).getTime(); | ||
| if (now >= begin && now <= end) { | ||
| return { currentPhase: phase, allPhases }; | ||
| } | ||
| } | ||
|
|
||
| const lastPhase = allPhases[allPhases.length - 1]; | ||
| if (now > new Date(lastPhase.timeEnd).getTime()) { |
Contributor
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Locate the specific file
find . -path "*operator-lifecycle-manager/src/components/operator-lifecycle-status.tsx" -type fRepository: openshift/console
Length of output: 153
🏁 Script executed:
#!/bin/bash
# Read the file to examine lines 97-106 and 141-147
FILE=$(find . -path "*operator-lifecycle-manager/src/components/operator-lifecycle-status.tsx" -type f)
if [ -f "$FILE" ]; then
echo "=== Full file context ==="
wc -l "$FILE"
echo "=== Lines 80-160 (surrounding context) ==="
sed -n '80,160p' "$FILE"
fiRepository: openshift/console
Length of output: 2468
🏁 Script executed:
#!/bin/bash
# Check for PatternFly Label usage patterns in the file
FILE=$(find . -path "*operator-lifecycle-manager/src/components/operator-lifecycle-status.tsx" -type f)
if [ -f "$FILE" ]; then
echo "=== PatternFly imports and Label usage ==="
grep -n "Label\|import.*patternfly\|from '@patternfly" "$FILE" | head -20
fiRepository: openshift/console
Length of output: 690
🌐 Web query:
PatternFly Label component React API status prop color
💡 Result:
In PatternFly React, the Label component has a status prop and a color prop. The status prop controls the status icon and color, and it overrides the color prop. - status prop: valid values include 'success', 'warning', 'danger', 'info', and 'custom'. It “overrides the color set by the color property.” [1] - color prop: “Color of the label.” [1] - icon prop: “Overrides the icon set by the status property.” [1] So, if you pass both status and color, status wins for both icon+color (color won’t override status). If you also pass icon, icon wins over the status icon. [1] Example implication: will render using the success status styling, not red. [1]
Citations:
YYYY-MM-DD parsing makes support dates timezone-dependent.
new Date('2025-12-31') is parsed as UTC midnight, but toLocaleDateString() formats it in local time. Users west of UTC will see support windows shifted—for example, PST users will see a support end date one calendar day earlier than intended. The comparison logic now >= begin && now <= end evaluates the same boundary differently across timezones. Treat these as calendar dates in the user's local timezone, not UTC instants.
Also applies to: 141-147
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In
`@frontend/packages/operator-lifecycle-manager/src/components/operator-lifecycle-status.tsx`
around lines 97 - 106, The phase date strings (phase.timeBegin / phase.timeEnd)
are being parsed with new Date('YYYY-MM-DD') which yields UTC midnight and
causes timezone-dependent boundary errors; instead parse the YYYY-MM-DD strings
into local calendar-day boundaries and compare against now: for each phase in
allPhases convert timeBegin into a local start-of-day (new Date(year, month-1,
day) or equivalent) and convert timeEnd into the local end-of-day (set to
23:59:59.999) before computing begin/end, then use now >= begin && now <= end;
update the same parsing logic used around the other block (lines referenced
141-147) so all comparisons treat dates as local calendar dates rather than UTC
instants.
Comment on lines
+44
to
+80
| const fetchLifecycleData = ( | ||
| cacheKey: string, | ||
| url: string, | ||
| signal: AbortSignal, | ||
| ): Promise<LifecycleData> => { | ||
| const existing = lifecycleCache.get(cacheKey); | ||
| if (existing?.promise) { | ||
| return existing.promise; | ||
| } | ||
|
|
||
| const promise = coFetchJSON(url, 'GET', { signal }).then( | ||
| (result: LifecycleData) => { | ||
| lifecycleCache.set(cacheKey, { | ||
| data: result, | ||
| error: null, | ||
| timestamp: Date.now(), | ||
| }); | ||
| return result; | ||
| }, | ||
| (err: Error) => { | ||
| lifecycleCache.set(cacheKey, { | ||
| data: null, | ||
| error: err, | ||
| timestamp: Date.now(), | ||
| }); | ||
| throw err; | ||
| }, | ||
| ); | ||
|
|
||
| lifecycleCache.set(cacheKey, { | ||
| data: null, | ||
| error: null, | ||
| timestamp: Date.now(), | ||
| promise, | ||
| }); | ||
|
|
||
| return promise; |
Contributor
There was a problem hiding this comment.
Don't let one caller abort poison the shared cache entry.
The cached promise is created with the first caller's AbortSignal, then reused by later callers. If that original component unmounts or changes params, cleanup aborts the shared request, the catch path caches that abort as an error for 30s, and unrelated rows can show a false error/no-data state even though the backend is healthy.
Also applies to: 122-157
| // 3.9.0+incompatible, but it was retracted. | ||
| replace github.com/openshift/api => github.com/openshift/api v0.0.0-20260114133223-6ab113cb7368 | ||
|
|
||
| replace github.com/operator-framework/operator-registry => /Users/pegoncal/repos/perdasilva/operator-registry |
Contributor
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check the go.mod file around line 242 to verify the replace directives
echo "=== Checking go.mod around line 242 ==="
sed -n '235,250p' go.mod
echo -e "\n=== All replace directives in go.mod ==="
grep -n "^replace " go.mod || echo "No replace directives found"
echo -e "\n=== Checking for local paths in replace directives ==="
grep "replace.*=>" go.mod | grep -E "(\/Users|\/home|\.\/)" || echo "No local path replaces found"Repository: openshift/console
Length of output: 1259
🏁 Script executed:
#!/bin/bash
# Check Docker-related replaces
echo "=== Docker-related module pins ==="
grep -n "docker" go.mod | grep -E "(github\.com/docker|replace)"
# Get line count to understand file size
echo -e "\n=== go.mod file info ==="
wc -l go.modRepository: openshift/console
Length of output: 662
Remove the workstation-local operator-registry replace before merge.
The absolute path at line 242 (/Users/pegoncal/repos/perdasilva/operator-registry) breaks reproducible builds and will fail in CI and for any downstream consumer unless they have that exact directory. Replace this with a reachable git ref or pseudo-version.
Note: Lines 244–246 pin Docker modules to exact versions (v27.5.0+incompatible) as required by coding guidelines, though these versions are older than the transitive dependencies would otherwise resolve. Verify this downgrade is intentional.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 242, Remove the workstation-local replace entry for the
module "github.com/operator-framework/operator-registry" (which currently points
to an absolute path) and replace it with a reachable module reference such as an
official tagged version, a git tag/ref, or a pseudo-version (avoid absolute
filesystem paths); also verify the intentionality of the Docker module pins (the
pinned "v27.5.0+incompatible" entries) and either keep them with a comment
explaining why they must be downgraded or update them to the desired versions
consistent with transitive dependency resolution.
| "net/http" | ||
| "regexp" | ||
|
|
||
| registryapi "github.com/operator-framework/operator-registry/pkg/api" |
Contributor
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check the go.mod replace directive for operator-registry
grep -A2 "operator-framework/operator-registry" go.mod || echo "No replace directive found"Repository: openshift/console
Length of output: 410
🏁 Script executed:
#!/bin/bash
# Check git log for any mention of this replace directive or the fork repo
git log --oneline --all -20 | head -20
# Also check for any UPSTREAM or TODO comments about this
grep -r "GetCustomSchemas\|operator-registry" --include="*.md" --include="*.txt" --include="*.go" | head -20Repository: openshift/console
Length of output: 3844
🌐 Web query:
operator-framework operator-registry GetCustomSchemas status
💡 Result:
No evidence found of a GetCustomSchemas method or endpoint in the operator-framework/operator-registry. The operator-registry exposes a gRPC API via the api.Registry service with the following documented methods: ListPackages, GetPackage, GetBundle, GetBundleForChannel, GetBundleThatReplaces, GetChannelEntriesThatProvide, GetLatestChannelEntriesThatProvide, GetDefaultBundleThatProvides, GetChannelEntriesThatReplace[1][2][3][4][5]. Custom resource schemas are typically defined in CRDs within operator bundles, accessible via bundle manifests retrieved through GetBundle etc., not a dedicated GetCustomSchemas endpoint[6]. Recent schema work relates to bundle configuration validation (e.g., watchNamespace, deploymentConfig) in operator-controller, not registry API[7][8]. Status: no such API exists in current operator-registry (v1.66.0 as of 2026-04)[1].
Citations:
- 1: https://pkg.go.dev/github.com/operator-framework/operator-registry
- 2: https://registry-operator.dev/latest/reference/out/
- 3: https://github.com/operator-framework/operator-registry/blob/master/AGENTS.md
- 4: https://github.com/operator-framework/operator-registry/tree/master
- 5: How to get these registries' info? operator-framework/operator-registry#33
- 6: https://olm.operatorframework.io/docs/tasks/creating-operator-bundle/
- 7: openshift/operator-framework-operator-controller@12923b9
- 8: ✨ Add automated schema generation and validation for registry+v1 bundle configuration operator-framework/operator-controller#2454
Remove local developer path from go.mod before merge—this blocks builds for all other developers.
The replace directive currently points to /Users/pegoncal/repos/perdasilva/operator-registry, a local machine-specific path that will fail in CI/CD and for other developers. Either point it to a public fork repository (with a GitHub URL) or remove the replace directive entirely.
Additionally, GetCustomSchemas doesn't exist in the upstream operator-registry API (confirmed as of v1.66.0). This is a fork-specific extension. If keeping the custom implementation, ensure the replace directive references a persistent, publicly accessible fork repository, and track the upstream work to eventually remove the replace directive when GetCustomSchemas is published.
🧰 Tools
🪛 golangci-lint (2.12.1)
[error] 9-9: could not import github.com/operator-framework/operator-registry/pkg/api (pkg/olm/lifecycle.go:9:2: github.com/operator-framework/operator-registry@v1.50.0: replacement directory /Users/pegoncal/repos/perdasilva/operator-registry does not exist)
(typecheck)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@pkg/olm/lifecycle.go` at line 9, The go.mod replace directive pointing to a
local filesystem path must be removed or replaced with a persistent public fork
URL so CI and other devs can build; locate the replace entry in go.mod and
either delete it or change it to a public Git remote (e.g.,
github.com/<your-fork>/operator-registry vX.Y.Z) and run `go mod tidy`; also
reconcile use of the fork-only API GetCustomSchemas in lifecycle.go by either
removing or replacing calls to GetCustomSchemas (or wrapping them behind a
compat shim) if you intend to track upstream, or ensure the go.mod replace
references your public fork that actually implements GetCustomSchemas so the
symbol resolves.
perdasilva
force-pushed
the
upgrade-planner-2.0
branch
2 times, most recently
from
b0bdcd9 to
31412d7
Compare
perdasilva
force-pushed
the
upgrade-planner-2.0
branch
from
31412d7 to
28d960c
Compare
Adds lifecycle metadata (support status, OpenShift compatibility) to the
installed operators table by querying the CatalogSource gRPC Registry
service's ListPackageCustomSchemas endpoint.
Backend: New lifecycle handler dials the CatalogSource at
{catalogName}.{namespace}.svc:50051 and calls ListPackageCustomSchemas
with schema "io.openshift.operators.lifecycles.v1alpha1". CatalogSources
running older opm versions that don't implement the endpoint return 503,
so the frontend gracefully shows "no data" for those operators.
Frontend: New useOperatorLifecycle hook fetches lifecycle data from the
backend proxy. The installed operators table gains "Support Status" and
"OpenShift Compatibility" columns that display lifecycle phase and
version compatibility information from the catalog.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
perdasilva
force-pushed
the
upgrade-planner-2.0
branch
from
28d960c to
51f1a9e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Analysis / Root cause:
The console needs to surface operator lifecycle metadata (support status, OpenShift version compatibility) directly in the installed operators table. Previously, this data was fetched from a separate lifecycle-server HTTP sidecar. This PR switches to querying the CatalogSource's native gRPC
ListPackageCustomSchemasendpoint, eliminating the need for a dedicated sidecar service.Solution description:
Backend:
pkg/olm/lifecycle.godials the CatalogSource gRPC Registry service at{catalogName}.{namespace}.svc:50051ListPackageCustomSchemaswith schemaio.openshift.operators.lifecycles.v1alpha1and the package namegoogle.protobuf.Structresponse and returns it as JSONListPackageCustomSchemasby returning HTTP 503 (maps from gRPCcodes.Unimplemented), so the frontend gracefully shows "no data"codes.Unavailable→ HTTP 503, empty stream → HTTP 404Frontend:
useOperatorLifecyclehook fetches lifecycle data from the backend proxy with client-side caching (5 min success, 30s error TTL)operator-lifecycle-statuscomponent renders support phase labels and OpenShift compatibility statusScreenshots / screen recording:
Test setup:
ListPackageCustomSchemaswith lifecycle schema data loadedTest cases:
Browser conformance:
Additional info:
go.modincludes areplacedirective foroperator-framework/operator-registrypointing to a local fork that adds theListPackageCustomSchemasendpoint. This will need to be updated to the published version once released.🤖 Generated with Claude Code