Skip to content

Spike: Expose catalogd service off cluster #1765

@ankitathomas

Description

@ankitathomas
Contributor

epic: #1424

Investigate methods for exposing catalogd service off cluster for querying for kubectl-operator. Potential options include:

  • kubectl port-forward : requires permissions to set up the port-forward connection (Enhance RBAC model to separate pod creation and port-forwarding kubernetes/kubernetes#110999 (comment), bind local port),
  • proxy : access the service at http://<kubernetes_master_address>/api/v1/namespaces/<namespace_name>/services/<service_name>/proxy - requires service/proxy permissions, no client authentication for external access to catalogd
  • Expose service with a nodeport : Create the catalogd service with a nodeport, requires local port reservation by default with catalogd, and for the kubectl plugin to discover the local port assignment (present on service as externalIPs, ports.nodePort).
  • kubernetes Gateway or Ingress : requires either the Gateway API addon or a third party ingress controller, OLM cannot make assumptions that a gateway/ingress controller will be running on every cluster.

If choosing a hybrid approach, follow-on work is required to also add ability to toggle on or off different methods, and also to automatically choose a method depending on the information provided by the currently running catalogd controller

Sub-issues

Sub-issues

0 of 1 Issues completed

Activity

changed the title [-]WIP: Expose catalogd service off cluster[/-] [+]Spike: Expose catalogd service off cluster[/+] on Mar 6, 2025
self-assigned this
on Mar 6, 2025
github-actions

github-actions commented on Jun 25, 2025

@github-actions

Issues go stale after 90 days of inactivity. If there is no further activity, the issue will be closed in another 30 days.

added
lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.
on Jun 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

epic/kubectl-operator-pluginlifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.v1.xIssues related to OLMv1 features that come after 1.0

Type

No type

Projects

Status

No status

Milestone

No milestone

Development

No branches or pull requests

    Participants

    @ankitathomas

    Issue actions

      Spike: Expose catalogd service off cluster · Issue #1765 · operator-framework/operator-controller