k8s-operatorhub / operatorhub.io

The OperatorHub.io website
Apache License 2.0
17 stars 12 forks source link

Suggested OLM version to install is dangerously outdated #38

Closed exdx closed 1 year ago

exdx commented 2 years ago

Describe the bug

The version of OLM suggested to install when installing an operator is 0.14.1, which is very very old and insecure. image

What did you expect to see? The latest version of OLM would be suggested to install, v0.22.0

Additional context This issue is important because the old version recommend is definitely insecure at this point, and likely won't even work properly.

tlwu2013 commented 2 years ago

Thanks for filing this issue with us, @exdx.

As of today, the OLM version suggested on OperatorHub.io has been updated to v0.22.0

curl -sL https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.22.0/install.sh | bash -s v0.22.0

We appreciate your help in raising awareness!

dmesser commented 1 year ago

This happens when there is an issue with the GitHub API that is used to determine the latest release of on the OLM project. Its run in the client's browser so it may be subject to rate limiting. I also updated the default fallback version a while ago: https://github.com/k8s-operatorhub/operatorhub.io/commit/345a6e4e9b3cb888ead5e90015b2b5b9d3ae55c9