James Harmison

I'd like to +1 the bare-metal local volume case, and expand the target use case beyond regular "bare metal" considerations to include software-defined storage composed of bare-metal block devices (e.g....

https://github.com/RedHatGov/devsecops-operator/blob/main/roles/devsecops-workshop/tekton/tasks/main.yml#L11 We should probably use some kind of logic to see what channels are available and install from there - since installation of the operator on different releases of OCP...

I think we should move this fix into the operator, rather than documenting a manual fix. It should be able to react to one not existing, IMO.

I propose a third alternative which would work well for the use case of the utility scripts: https://github.com/pypa/pipenv - `Pipfile.lock` would be equivalent to pinning versions in requirements.txt, except less...

> Because FIPS must be enabled before the operating system that your cluster uses boots for the first time, you cannot enable FIPS after you deploy a cluster. https://docs.openshift.com/container-platform/4.7/installing/installing-fips.html :(