new TODOs

roles/fix-operators/tasks/main.yml

@@ -125,7 +125,7 @@
   register: op_catalog
 
 # TODO: remove the catalogsource also if the pod is older than the secret
-- name: Remove existing catalogsource from openshift-marketplace if rhsso-operator belongs to it
+- name: Remove existing do280-catalog if rhsso-operator belongs to it or if not using correct image/secret
   k8s:
     kubeconfig: tmp/kubeconfig-ocp4
     validate_certs: no

roles/integrate-rhsso-ocp/tasks/main.yml

@@ -206,5 +206,7 @@
               - groups
             issuer: "{{ sso_url }}/auth/realms/sample"
 
+# TODO: Wait for clusteroperator/authentication to stop progressing.
+
 # TODO: Check that all keycloakuser (or all users?) have offline_access realm role?
 ...