The operator currently doesn't support defining additional volumes for Clair. Because CPE JSON files are around 2 MB, it's impossible to save them inside a config map or a secret, which means the only way to actually insert them into Clair is via a PVC, and that means modifying the operator via kustomize template and creating a manual PVC for that purpose. Creation of the CPE JSON volume should be automated through the operator. This is extremely important for disconnected environments, without CPE files being available, there's no detection of vulnerabilities and no indexing of images.

Let me know if you have any questions!