orb

README

orb

Resolve, render, and inspect operator bundles and catalogs, all client-side.

Usage

Quick start: from catalog to cluster

# 1. Add a catalog
orb catalog add operatorhubio docker://quay.io/operatorhubio/catalog:latest

# 2. Resolve the latest bundle for a package
orb catalog resolve vault

# 3. Convert and apply in one shot
orb bundle convert plain \
  "$(orb catalog resolve vault -o jsonpath='{.items[0].image}')" \
  -n operators | kubectl apply -f -

Catalog management

Add catalogs from OCI images, then resolve bundles from them.

# Add a catalog with labels and priority
orb catalog add operatorhubio docker://quay.io/operatorhubio/catalog:latest \
  --label env=prod --label tier=community --priority 100

# List configured catalogs (sorted by priority)
orb catalog list

# Edit labels and priority
orb catalog edit operatorhubio --label env=staging
orb catalog edit operatorhubio --remove-label tier --priority 50

# Update catalog content (re-pull from registry)
orb catalog update operatorhubio

# Remove a catalog
orb catalog remove operatorhubio

Resolve

Find matching bundles for a package from configured catalogs. Catalogs are searched in priority order; the first catalog containing the package is used. All matching bundles are returned, sorted by version descending.

# Basic resolve (all versions)
orb catalog resolve vault

# Filter by channel
orb catalog resolve vault --channel stable

# Filter by version constraint (Masterminds semver syntax)
orb catalog resolve vault --version ">=0.4.0, <1.0.0"

# Filter by catalog labels (Kubernetes label selector syntax)
orb catalog resolve vault -l env=prod,tier=community

# Find upgrade candidates from an installed bundle
orb catalog resolve vault --installed vault-operator.v0.4.10=0.4.10

# Output as JSON, YAML, or extract fields with JSONPath
orb catalog resolve vault -o json
orb catalog resolve vault -o yaml
orb catalog resolve vault -o jsonpath='{.items[0].image}'

Convert to plain manifests

orb bundle convert plain docker://quay.io/my/bundle:v1 -n operators
orb bundle convert plain docker://quay.io/my/bundle:v1 dir:/tmp/output -n operators
orb bundle convert plain docker://quay.io/my/bundle:v1 -n operators --cert-provider cert-manager

Convert to Helm chart

orb bundle convert helm docker://quay.io/my/bundle:v1 dir:/tmp/chart

The generated Helm chart supports install-time configuration via values:

Value	Description	Default
watchNamespace	Namespace to watch. "" = AllNamespaces; set to a namespace for OwnNamespace/SingleNamespace.	""
certProvider	Certificate provider for webhooks: "cert-manager" or "service-ca". Required when the bundle has webhooks.	"cert-manager"
deploymentConfig	Deployment overrides following OLM subscription.spec.config semantics.	{}

deploymentConfig fields

Field	Merge behavior
env	Override by name, append new
envFrom	Append
volumes	Append
volumeMounts	Append to all containers
tolerations	Append
resources	Replace
nodeSelector	Replace
affinity	Override non-nil sub-fields (nodeAffinity, podAffinity, podAntiAffinity)
annotations	Existing annotations take precedence

Examples

# Render with default values (AllNamespaces mode)
helm template my-release /tmp/chart --namespace operators

# Watch a single namespace
helm template my-release /tmp/chart --namespace operators --set watchNamespace=monitoring

# Use service-ca instead of cert-manager for webhook certificates
helm template my-release /tmp/chart --namespace operators --set certProvider=service-ca

# Override deployment resources
helm template my-release /tmp/chart --namespace operators \
  --set deploymentConfig.resources.limits.cpu=2 \
  --set deploymentConfig.resources.limits.memory=8Gi

Supported transports

Sources and destinations use skopeo-style transport prefixes:

Transport	Description
docker://	Container registry
oci:	OCI image layout directory
oci-archive:	OCI image layout archive
dir:	Local directory
tar:	Tar archive (source only)
stdout	Standard output (plain format only)

License

Apache License 2.0