-
Bug
-
Resolution: Done
-
Critical
-
ACM 2.11.0
-
None
-
2
-
False
-
-
False
-
-
-
GRC Sprint 2024-11, GRC Sprint 2024-12
-
Important
-
No
Description of problem:
OperatorPolicy does not report when the version installed should not be allowed
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
- Create an OperatorPolicy for some operator (I used quay-operator). Don't set any `versions`. Set it to enforce.
- The OperatorPolicy should install the operator successfully and become compliant
- Note the current version of the operator (in my case, quay-operator.v3.11.1).
- Edit the policy to set the `versions` list to anything that does not include that version. For example `["quay-operator.v3.14159"]`.
- Observe the policy status
Actual results:
The policy is compliant
Expected results:
The policy should have a violation, because the version running on the cluster is not a version I have specified as allowed in the policy.