Jakub Hrozek

OCP4: Look at rendered-config-xyz when checking FIPS, consolidate two rules

10

#### Description: We used to have two rules that were checking for the cluster being installed in FIPS mode, one was checking for an MC called 99-master-fips and was used...

Add a helper script to add manifests and platform: versions for a new OCP release

11

#### Description: Each time we switch to a new OCP release, we tend to forget to add the new OCP release to the list of platforms for versioned rules and...

filter_rules does not work with boolean "dynamic" platforms

2

#### Description of problem: In OCP we use filter_rules a lot, in conjuction with `platforms`, typically to separate rules for `ocp4` and `ocp4-node`. Some rules (like applications/openshift/master/file_groupowner_ovs_conf_db_lock_s390x/rule.yml) also use the...

nodestatus: Only log low-level messages if verbosity is increased

2

#### What type of PR is this? /kind cleanup #### What this PR does / why we need it: Unless the nodestatus controller is being debugged, then these messages are...

nodestatus: Remove dead code

2

#### What type of PR is this? /kind cleanup #### What this PR does / why we need it: The NewStatusReconciler function was unused since 4c28bcc12902aae3a3f81380a66993e798e0ae31 #### Which issue(s) this...

Autodetect or build-time select platform capabilities

13

#### What would you like to be added: Autodetect and/or select during build with build flags the capabilities of the k8s platform - does it support seccomp? Does it suport...

tests: Add the recording RBAC roles and SA dynamically, re-add on every operator redeploy

7

#### What type of PR is this? /kind bug /kind failing-test #### What this PR does / why we need it: No idea why we didn't catch this before when...

Ship a more complex security policy example

13

#### What would you like to be added: A more complex security policy example than the current nginx one. While the nginx example is good, I think it would be...

#### What happened: There's a lot of messages in the nodestatus.go module that use the Info level while using the increased verbosity configurable in spod would probably be a better...

Not all CRs have an example annotation in the bundle

2

#### What happened: I noticed this while working on the operatorhub submission: Not all CRs have an example annotation defined in the CSV. This will get also caught in scorecard...