Add DeprecationAvaliable to ComplianceConfigAction

Add DeprecationAvaliable to ComplianceConfigAction
Signed-off-by: yiraeChristineKim <[email protected]>

Author: yiraeChristineKim

api/v1beta1/operatorpolicy_types.go

@@ -134,6 +134,13 @@ type ComplianceConfig struct {
 	//
 	//+kubebuilder:default=Compliant
 	UpgradesAvailable ComplianceConfigAction `json:"upgradesAvailable,omitempty"`
+	// DeprecationAvailable specifies how the NoDeprecations condition impacts overall
+	// policy compliance. The default value is `Compliant`. If any deprecations are detected
+	// in the package, channel, or bundle with DeprecationAvailable = NonCompliant,
+	// then the policy compliance will be set to `Compliant`.
+	//
+	// +kubebuilder:default=Compliant
+	DeprecationAvailable ComplianceConfigAction `json:"deprecationAvailable,omitempty"`
 }
 
 // OperatorPolicySpec defines the desired state of a particular operator on the cluster.

controllers/operatorpolicy_status.go

@@ -283,7 +283,8 @@ func calculateComplianceCondition(policy *policyv1beta1.OperatorPolicy) metav1.C
 	}
 
 	idx, cond = policy.Status.GetCondition(deprecationType)
-	if !policy.Spec.ComplianceType.IsMustNotHave() {
+	if !policy.Spec.ComplianceType.IsMustNotHave() &&
+		policy.Spec.ComplianceConfig.DeprecationAvailable == "Compliant" {
 		if idx == -1 {
 			messages = append(messages, "The deprecation status is unknown")
 			foundNonCompliant = true

deploy/crds/kustomize_operatorpolicy/policy.open-cluster-management.io_operatorpolicies.yaml

@@ -68,6 +68,17 @@ spec:
                     - Compliant
                     - NonCompliant
                     type: string
+                  deprecationAvailable:
+                    default: Compliant
+                    description: |-
+                      DeprecationAvailable specifies how the NoDeprecations condition impacts overall
+                      policy compliance. The default value is `Compliant`. If any deprecations are detected
+                      in the package, channel, or bundle with DeprecationAvailable = NonCompliant,
+                      then the policy compliance will be set to `Compliant`.
+                    enum:
+                    - Compliant
+                    - NonCompliant
+                    type: string
                   upgradesAvailable:
                     default: Compliant
                     description: |-

deploy/crds/policy.open-cluster-management.io_operatorpolicies.yaml

@@ -70,6 +70,17 @@ spec:
                     - Compliant
                     - NonCompliant
                     type: string
+                  deprecationAvailable:
+                    default: Compliant
+                    description: |-
+                      DeprecationAvailable specifies how the NoDeprecations condition impacts overall
+                      policy compliance. The default value is `Compliant`. If any deprecations are detected
+                      in the package, channel, or bundle with DeprecationAvailable = NonCompliant,
+                      then the policy compliance will be set to `Compliant`.
+                    enum:
+                    - Compliant
+                    - NonCompliant
+                    type: string
                   upgradesAvailable:
                     default: Compliant
                     description: |-

test/e2e/case38_install_operator_test.go

@@ -3762,11 +3762,11 @@ var _ = Describe("Testing OperatorPolicy", Ordered, Label("supports-hosted"), fu
 
 				check(
 					allPolName,
-					false,
+					true,
 					[]policyv1.RelatedObject{},
 					metav1.Condition{
 						Type:   "NoDeprecations",
-						Status: metav1.ConditionTrue,
+						Status: metav1.ConditionFalse,
 						Reason: "PackageDeprecated",
 						Message: "the requested deprecation-operator Package was deprecated. " +
 							"deprecation-operator is end of life.  Please don't use this package.",
@@ -3783,11 +3783,11 @@ var _ = Describe("Testing OperatorPolicy", Ordered, Label("supports-hosted"), fu
 
 				check(
 					channelPolName,
-					false,
+					true,
 					[]policyv1.RelatedObject{},
 					metav1.Condition{
 						Type:   "NoDeprecations",
-						Status: metav1.ConditionTrue,
+						Status: metav1.ConditionFalse,
 						Reason: "ChannelDeprecated",
 						Message: "the requested alpha Channel was deprecated. " +
 							"channel alpha is no longer supported.  Please switch to channel 'stable'",
@@ -3802,13 +3802,38 @@ var _ = Describe("Testing OperatorPolicy", Ordered, Label("supports-hosted"), fu
 				createObjWithParent(parentPolicyYAML, parentPolicyName,
 					bundlePolYAML, testNamespace, gvrPolicy, gvrOperatorPolicy)
 
+				check(
+					bundlePolName,
+					true,
+					[]policyv1.RelatedObject{},
+					metav1.Condition{
+						Type:   "NoDeprecations",
+						Status: metav1.ConditionFalse,
+						Reason: "BundleDeprecated",
+						Message: "the requested dep-bundle-operator.v0.0.1 Bundle was deprecated. " +
+							"dep-bundle-operator.v0.0.1 bundle is no longer supported.",
+					},
+					"",
+				)
+			})
+		It("Should have deprecation message is displayed and policy compliance is Compliant "+
+			"when bundle is deprecated and deprecationAvaliable is set to NonCompliant",
+			func(_ SpecContext) {
+				createObjWithParent(parentPolicyYAML, parentPolicyName,
+					bundlePolYAML, testNamespace, gvrPolicy, gvrOperatorPolicy)
+
+				utils.Kubectl("patch", "operatorpolicy", bundlePolName, "-n", testNamespace, "--type=json", "-p",
+					`[{"op": "replace",
+					"path": "/spec/complianceConfig/deprecationAvaliable",
+					"value": "NonCompliant"}]`)
+
 				check(
 					bundlePolName,
 					false,
 					[]policyv1.RelatedObject{},
 					metav1.Condition{
 						Type:   "NoDeprecations",
-						Status: metav1.ConditionTrue,
+						Status: metav1.ConditionFalse,
 						Reason: "BundleDeprecated",
 						Message: "the requested dep-bundle-operator.v0.0.1 Bundle was deprecated. " +
 							"dep-bundle-operator.v0.0.1 bundle is no longer supported.",