Elliott Baron

CI builds have an incomplete version string

1

Our 2.1.0 release has `06a7974` listed for version as reported by Cryostat. I think there are a couple of problems here: 1. The CI build does not fetch any tags...

[Task] Replace TokenReview with User self-query

2

Interestingly `user:info` grants access to `user.openshift.io/v1/users/~` which returns information on the user: https://docs.openshift.com/container-platform/4.9/rest_api/user_and_group_apis/user-user-openshift-io-v1.html. We could likely replace the TokenReview with this. This would cover all the permissions in https://github.com/cryostatio/cryostat-operator/blob/e524857960ffdfe44eaa360e9fd215d14b968953/config/rbac/cryostat_role.yaml, which...

[Task] Select default permissions that do not use FlightRecorder/Recording

1

After #635, we can modify which Cryostat permissions map to which Kubernetes RBAC permissions. Now we should modify the default Kubernetes permissions from their current values. Since the FlightRecorder and...

Optional podCount spec descriptor fails if path not present in CR

1

Hi! My [CRD](https://github.com/cryostatio/cryostat-operator/blob/main/docs/config.md#reports-options) includes the following structure: ```yaml spec: reportOptions: replicas: 0 ``` Both `reportOptions` and `replicas` are optional fields. The `replicas` field uses the `podCount` spec descriptor. If the...

Cryostat still requests an OAuth token scoped to the namespace it's installed in. With multi-namespace support, Cryostat will need a scoped token with role scopes for each of the configured...

We should define the expected related image environment variables for these new images.

[Request] Command line flag to force OpenShift

7

### Describe the feature It would be helpful for downstream releases if there was a command line option for the operator to force OpenShift instead of relying on the existing...

Using an existing JFR file uploaded to Cryostat, it should be possible to verify the data presented by Grafana for that recording. It should be possible to use the Grafana...

We should have scorecard tests that use the Cryostat Agent instead of remote JMX. This would involve: 1. Adding a CI job, possibly to the Cryostat Agent repo, that builds...

We should be able to get repeatable output from actions on JFR recordings by uploading a prefabricated recording to Cryostat. This would enable us to test more complex actions such...