Deploying OLM using the package_release.sh script, which generates the k8s manifest files, does not allow me to apply tolerations to the upstream CatalogSource.

https://github.com/operator-framework/operator-lifecycle-manager/blob/e283761e0019aed7242a61a5055edd6842a84f09/deploy/chart/templates/0000_50_olm_17-upstream-operators.catalogsource.yaml#L3C7-L3C20

The workaround was to set installtype to "" and then install the catalogsource myself with the toleration.

grpcPodConfig: securityContextConfig: restricted tolerations: - key: "key1" operator: "Equal" value: "value1" effect: "NoSchedule"