approve

Name

olm:approve

Synopsis

/olm:approve <operator-name> [namespace] [--all]

Description

The olm:approve command approves pending InstallPlans for operators with manual approval mode. This is required for operators that have installPlanApproval: Manual in their Subscription to proceed with installation or upgrades.

This command helps you:

• Approve operator installations that are waiting for manual approval
• Approve operator upgrades
• Review what will be installed/upgraded before approval
• Batch approve multiple pending InstallPlans

Implementation

The command performs the following steps:

1. Parse Arguments:

   • $1: Operator name (required) - Name of the operator
   • $2: Namespace (optional) - Namespace where operator is installed
     • If not provided, searches for the operator across all namespaces
   • $3: Flag (optional):
     • --all: Approve all pending InstallPlans in the namespace

2. Prerequisites Check:

   • Verify oc CLI is installed: which oc
   • Verify cluster access: oc whoami
   • Check if user has sufficient privileges

3. Locate Operator:

   • If namespace provided, verify operator exists:

     oc get subscription {operator-name} -n {namespace} --ignore-not-found
     

   • If no namespace provided, search across all namespaces:

     oc get subscription --all-namespaces -o json | jq -r '.items[] | select(.spec.name=="{operator-name}") | .metadata.namespace'
     

   • If not found, display error with suggestions

4. Check Subscription Approval Mode:

   • Get Subscription approval mode:

     oc get subscription {operator-name} -n {namespace} -o jsonpath='{.spec.installPlanApproval}'
     

   • If mode is "Automatic", display informational message:

     ℹ️  Operator '{operator-name}' has automatic approval enabled.
     InstallPlans are approved automatically and don't require manual intervention.
     
     Current Subscription approval mode: Automatic
     
     To switch to manual approval mode:
     oc patch subscription {operator-name} -n {namespace} \
       --type merge --patch '{"spec":{"installPlanApproval":"Manual"}}'
     

   • Exit if automatic (no approval needed)