Skip to content

Conversation

@joelanford
Copy link
Collaborator

Description

3 separate commits that bring the boxcutter branch closer to being ready to merge into operator-controller's main branch:

  1. Add support for the webhook support feature gate to the boxcutter code paths
  2. Add boxcutter to the experimental release
  3. Add a new boxcutter specific cluster-admin cluster role binding

Reviewer Checklist

  • API Go Documentation
  • Tests: Unit Tests (and E2E Tests, if appropriate)
  • Comprehensive Commit Messages
  • Links to related GitHub Issue(s)

Signed-off-by: Joe Lanford <joe.lanford@gmail.com>
Signed-off-by: Joe Lanford <joe.lanford@gmail.com>
…re component

Signed-off-by: Joe Lanford <joe.lanford@gmail.com>
@joelanford joelanford changed the title Improve boxcutter experimental parity ✨ Improve boxcutter experimental parity Aug 1, 2025
}

if len(reg.CSV.Spec.WebhookDefinitions) > 0 && r.CertificateProvider == nil {
return nil, fmt.Errorf("unsupported bundle: webhookDefinitions are not supported")
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks more like an internal panic() that can only happen when you forget to setup the CertificateProvider with dependency injection. At least I find this error message to be confusing.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, this message is raised to users if they try to install an operator that OLM doesn't yet support.

We have similar messages for bundles the don't support AllNamespaces mode or bundles that define OLM dependencies.

The standard manifest does not enable a webhook feature gate, so in that case, we explicitly are not setting up a CertificateProvider.

Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, gotya.

}

if len(reg.CSV.Spec.WebhookDefinitions) > 0 && r.CertificateProvider == nil {
return nil, fmt.Errorf("unsupported bundle: webhookDefinitions are not supported")
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, gotya.

@thetechnick thetechnick merged commit d96b88a into thetechnick:poc-boxcutter Aug 1, 2025
12 of 14 checks passed
@tmshort
Copy link

tmshort commented Aug 1, 2025

Whelp... this got merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants