Configuring Preflight

October 31, 2025 ยท View on GitHub

The following configurables are available for the preflight tool.

Common Configuration

VariableKindDocRequired or OptionalDefault
PFLT_LOGLEVELenvThe verbosity of the preflight tool itself. Ex. warn, debug, trace, info, erroroptionalwarn
PFLT_LOGFILEenvWhere the execution logfile will be written.optionalpreflight.log
PFLT_ARTIFACTSenvWhere check-specific artifacts will be written.optionalartifacts/
PFLT_JUNITenvWill write results as JUnit XML.optionalfalse

Operator Policy Configuration

These configurables are specific to cases where preflight check operator ... is called.

VariableKindDocRequired or OptionalDefault
KUBECONFIGenvThe operator policy must interact with a Kubernetes cluster for checks such as DeployableByOLM and running OperatorSDK Scorecard.required-
PFLT_NAMESPACEenvThe namespace to use when running OperatorSDK Scorecardoptionaldefault
PFLT_SERVICEACCOUNTenvThe service account to use when running OperatorSDK Scorecardoptionaldefault
PFLT_INDEXIMAGEenvThe index image to use when testing that an operator is DeployableByOLMrequired-
PFLT_DOCKERCONFIGenvThe full path to a dockerconfigjson file, which is pushed to the target test cluster to access images in private repositories in the DeployableByOLM. If empty, no secret is created and the resource is assumed to be public.optional-
PFLT_SCORECARD_IMAGEenvA uri that points to the scorecard image digest, used in disconnected environments. It should only be used in a disconnected environment. Use preflight runtime-assets on a connected workstation to generate the digest that needs to be mirrored.optional-
PFLT_SCORECARD_WAIT_TIMEenvA time value that will be passed to scorecard's --wait-time environment variable.optionaldefault
PFLT_CHANNELenvThe name of the operator channel which is used by DeployableByOLM to deploy the operator. If empty, the default operator channel in bundle's annotations file is used.optional-

For information on how to build an index image, see BUILDING_AN_INDEX.md.

Container Policy Configuration

These configurables are specific to cases where preflight check container ... is called.

VariableKindDocRequired or OptionalDefault
PFLT_PYXIS_HOSTenvThe Pyxis host to connect to. Must contain any additional path information leading up to the API versionoptionalcatalog.redhat.com/api/containers
PFLT_PYXIS_API_TOKENenvThe API Token to be used when connecting to Pyxis. Used for authenticated calls only.optional?-
PFLT_CERTIFICATION_COMPONENT_IDenvCertification Component ID from connect.redhat.com. Should be supplied without the ospid- prefix.optional?-
PFLT_DOCKERCONFIGenvThe full path to a dockerconfigjson file, that has access to the container under test.required-