managed-operators-plugin

Dynamic console plugin for Red Hat Advanced Cluster Management (RHACM) / multicluster engine (MCE). It extends the OpenShift console in the All clusters (ACM) perspective with views for OLM operators on managed clusters.

Features

• Overview (/multicloud/ecosystem/managed-operators-overview): dashboard-style summary with ChartDonut cards (CSV health, pending upgrades, governance vs standalone OLM, policy reference) plus per-cluster counts and links to the other plugin pages.
• Installed Operators (/multicloud/ecosystem/installed-operators): OLM Subscriptions for each cluster (hub and/or managed), CSV status, InstallPlan approval, OperatorPolicy references where present; Edit policy only when the OperatorPolicy was created from this plugin (annotation console.openshift.io/managed-operators-plugin-created=true). Policies reconciled from a hub Policy, GitOps, or YAML (no plugin annotation) are labeled External — change them via RHACM / GitOps, not Uninstall here (the subscription would be recreated). Uninstall is offered for governance-backed installs that are not external (e.g. created from this plugin’s flow), understanding the OperatorPolicy may still recreate the Subscription until the policy is removed or changed; Migrate to OperatorPolicy for manual OLM installs (opt-in label managed-operators-plugin.openshift.io/enroll-operator-policy=true, then create a matching policy from Install operators or automation). When a Subscription has a pending Manual InstallPlan approval (spec.approved: false), the page offers an Approve InstallPlan action (merge-patch) so OLM can proceed.
• Install operators (/multicloud/ecosystem/install-operators): guided install flow aligned with OperatorPolicy and catalogs, with both a guided form and a read/write YAML tab when creating/editing OperatorPolicy. For GitOps-first teams, you can also Generate YAML (no apply) for ready-to-commit manifests.

All three pages are registered in console-extensions.json (routes + Ecosystem nav). Overview is the first menu item and the natural entry point for the plugin; it ships with the same build as Installed Operators and Install operators once you deploy the plugin.

Under Fleet Management → Ecosystem (after Infrastructure), the console lists Overview, then Installed Operators, then Install operators.

Screenshots

From the Fleet Management → Ecosystem menu in the ACM console.

Overview

Dashboard with ChartDonut cards (CSV phase, upgrades, governance, policy reference), center totals, legends, and summary counts per cluster.

Managed cluster operators (Installed Operators)

OLM subscriptions per cluster, CSV phase, OperatorPolicy reference (with External when not created from this plugin).

Install operators

Choose a Ready cluster, filter PackageManifests, then Install via OperatorPolicy or edit an existing policy.

Generate YAML (GitOps-first)

Generate an OperatorPolicy manifest without applying it to the cluster.

Create OperatorPolicy

Modal to name the policy, namespaces, channel, and related OLM fields before create.

Kubernetes APIs and MCE proxy

Calls use consoleFetchJSON from the dynamic plugin SDK. Cluster API paths are built with clusterApiPath() in src/utils/clusterApi.ts:

• Hub (current session) — special key __hub_direct__: the API path is used as-is (e.g. /apis/... against the console session you are logged into).

• Managed cluster — same Kubernetes API path, prefixed with the MCE console proxy to the spoke:

  /api/proxy/plugin/mce/console/multicloud/managedclusterproxy/{managedClusterName}{path}
  

  Example to list OLM catalog data on cluster prod-west-1:

  /api/proxy/plugin/mce/console/multicloud/managedclusterproxy/prod-west-1/apis/packages.operators.coreos.com/v1/packagemanifests
  

  The cluster name is passed through encodeURIComponent when needed for URL safety.

Resources and verbs (summary)

API group	Resource	Role in the plugin
packages.operators.coreos.com/v1	PackageManifest (list)	Install operators: available operators from the OLM catalog on the selected cluster (same idea as oc get packagemanifest).
operators.coreos.com/v1alpha1	CatalogSource (openshift-marketplace)	Catalog filters / context on Install operators and where needed on Installed Operators.
operators.coreos.com/v1alpha1	Subscription (cluster-wide list)	Installed Operators: what is installed; DELETE Subscription to uninstall.
operators.coreos.com/v1alpha1	InstallPlan (list)	Installed Operators: pending upgrades, manual approval, plan phase.
operators.coreos.com/v1alpha1	ClusterServiceVersion (by namespace/name)	Installed Operators: CSV phase and version for the subscription.
policy.open-cluster-management.io/v1beta1	OperatorPolicy (list, GET, POST, PUT)	Install operators and edits from Installed Operators: governance policy on the cluster (namespaced paths).

ManagedCluster (cluster.open-cluster-management.io/v1) is watched on the hub via the console client (useK8sWatchResource) to determine which clusters are selectable and Available.

Requirements

• OpenShift with the console and dynamic plugins enabled.
• RHACM / MCE with the ACM perspective in the console (the plugin registers with perspective: "acm").
• Kubernetes/OpenShift permissions to read Subscription, CSV, InstallPlan, CatalogSource, OperatorPolicy, and to use the proxy APIs toward managed clusters (per your environment’s policy).

Troubleshooting

Slow loading or missing managed-cluster data (MCE proxy)

If Installed Operators / Overview is slow to load (long "stalled" requests) or does not load managed-cluster data at all, the MCE console proxy can be the bottleneck.

In that case, restarting the console-mce-console pod in the multicluster-engine namespace often helps.

• Console link (example pod):

  • console-mce-console pod

• CLI:

  oc delete pod -n multicluster-engine -l app=console-mce-console
  # or delete a specific pod:
  oc delete pod -n multicluster-engine console-mce-console-64c5bcd85b-dnr98

UI / PatternFly

The console and this plugin use PatternFly 6. Use pf-v6-u-* utility classes (not pf-v5-u-*) so spacing and colors match the host console. For wide data tables, prefer OuterScrollContainer / InnerScrollContainer from @patternfly/react-table and set gridBreakPoint="" on Table to avoid responsive “stacked card” layout breaking the ACM page shell.

Local development

Prerequisites: Node.js (see Dockerfile, e.g. 22), Yarn (this repo uses Yarn 4 via packageManager; enable Corepack: corepack enable).

yarn install --immutable

• Watch build for the plugin (webpack dev server on port 9001):

  yarn start

• Local OpenShift Console connected to a cluster (oc configured with a token):

  yarn start-console

  The script runs the console in a container and expects the plugin from yarn start (see start-console.sh for CONSOLE_PORT and console image variables).

• Production build (output in dist/):

  yarn build

• Lint:

  yarn lint

• End-to-end (Cypress):

  yarn test-cypress
  # or
  yarn test-cypress-headless

Container image, push, and Helm install

The Dockerfile runs yarn install and yarn build in a Node stage and copies dist/ into an nginx image (static files on port 9443 with TLS via the chart). You do not need to run yarn build on the host first unless you want to check dist/ locally.

1. Build and push the image

Use linux/amd64 when building on Apple Silicon so the image runs on typical OpenShift nodes. Replace the image name with your registry and tag (example: quay.io/YOUR_ORG/managed-operators-plugin:v0.0.1).

Podman:

export IMAGE=quay.io/YOUR_ORG/managed-operators-plugin:v0.0.1
podman build --platform linux/amd64 -t "$IMAGE" .
podman push "$IMAGE"

One-liner equivalent:

podman build --platform linux/amd64 -t quay.io/YOUR_ORG/managed-operators-plugin:v0.0.1 . \
  && podman push quay.io/YOUR_ORG/managed-operators-plugin:v0.0.1

Docker (same idea):

docker build --platform linux/amd64 -t "$IMAGE" .
docker push "$IMAGE"

Log in to your registry (podman login quay.io, etc.) before pushing.

2. Install or upgrade with Helm

The chart is charts/openshift-console-plugin/. Set plugin.image to the same tag you pushed. Defaults for plugin name, TLS, and the console patch job are in charts/openshift-console-plugin/values.yaml.

Using --set:

helm upgrade -i managed-operators-plugin charts/openshift-console-plugin \
  -n managed-operators-plugin --create-namespace \
  --set plugin.image=quay.io/YOUR_ORG/managed-operators-plugin:v0.0.1

Using a values file — copy helm-values.example.yaml, set plugin.image, then:

helm upgrade -i managed-operators-plugin charts/openshift-console-plugin \
  -n managed-operators-plugin --create-namespace \
  -f helm-values.example.yaml

After deploy, ensure the cluster Console loads the plugin (the chart can run a post-install Job to add the plugin name to Console spec; see chart notes).

Roadmap / next features

Planned and under consideration. Contributions and design discussion are welcome via issues.

High-priority ideas

1. Minor-line regex + auto-approve (dashboard-driven) — Store a per–OperatorPolicy / per–cluster pattern in the console (persisted server-side or via CRD/ConfigMap—TBD), e.g. smb-csi-driver-operator.v4.20.*. A background or controller flow watches InstallPlans (and/or subscription state): when a new plan’s target CSV matches the saved regex, approve the InstallPlan if needed and patch OperatorPolicy with the concrete version read from the InstallPlan (or equivalent OLM fields). Scope: minor line only (no silent major jumps), audit trail, and explicit opt-in per policy. The plugin UI is the control plane for the pattern; execution may be a small operator on hub or managed cluster so it works without keeping the browser open.

Other ideas

• Bulk / multi-cluster patterns — Select several Ready clusters and apply the same install template (behind confirmations and RBAC checks).
• Overview drill-down (charts + filters) — Click-through from donut segments / summary lines to pre-filtered views (e.g. pending upgrades, external policies).
• Stronger testing and docs — Expand Cypress coverage for Overview and policy flows; document RBAC matrices and proxy requirements for managed clusters.
• More locales — Additional language packs beyond en once strings stabilize.

Repository layout (summary)

Path	Contents
src/components/	React pages exposed by the plugin (MyCustomPage, InstallOperatorsPage, …)
src/hooks/	Subscription/CSV/catalog/policy fetching
console-extensions.json	ACM routes and navigation
locales/en/	i18n strings (plugin__managed-operators-plugin)
charts/openshift-console-plugin/	Helm chart
integration-tests/	Cypress

License

Apache-2.0 (see package.json).