Skip to content

Conversation

@openshift-bot
Copy link
Contributor

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-08-12 13:24:50 operator-framework/operator-lifecycle-manager@d77eaa8 dependabot[bot] 🌱 Bump github.com/containers/image/v5 from 5.35.0 to 5.36.1 (#3621)
2025-08-12 13:37:18 operator-framework/operator-lifecycle-manager@3a72bc8 dependabot[bot] 🌱 bump github.com/operator-framework/api from 0.32.0 to 0.33.0 (#3619)
2025-08-12 13:40:32 operator-framework/operator-lifecycle-manager@12a6160 dependabot[bot] Bump actions/checkout from 4 to 5 (#3622)
2025-08-12 13:43:36 operator-framework/operator-lifecycle-manager@a7262d2 dependabot[bot] 🌱 Bump github.com/prometheus/client_golang (#3624)
2025-08-12 13:46:42 operator-framework/operator-lifecycle-manager@c83a951 dependabot[bot] Bump actions/download-artifact from 4 to 5 (#3625)
2025-08-12 13:49:46 operator-framework/operator-lifecycle-manager@7ed5c00 dependabot[bot] 🌱 Bump golang.org/x/net from 0.42.0 to 0.43.0 (#3626)
2025-08-12 15:22:50 operator-framework/operator-lifecycle-manager@3d81ef2 Todd Short 🌱 Bump github.com/maxbrunsfeld/counterfeiter/v6 (#3627)
2025-08-12 20:19:52 operator-framework/operator-lifecycle-manager@77ae211 Allen Ray NO-ISSUE: Enabled readonlyRootFilesystem by default (#3614)
2025-06-23 16:14:49 operator-framework/api@042719a Camila Macedo Upgrade controller-gen from v0.17.2 to v0.18.0 and re-generate CRDs
2025-07-01 11:47:23 operator-framework/api@3d91a60 dependabot[bot] Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in the k8s-dependencies group (#436)
2025-07-15 09:57:13 operator-framework/api@d34b367 dependabot[bot] Bump github.com/google/cel-go from 0.25.0 to 0.26.0 (#437)
2025-07-22 15:04:14 operator-framework/api@d6a691f Jordan Keister normalize unit test targets across repos. add skip/target test args (#438)
2025-07-22 15:20:47 operator-framework/api@d2484b6 Jordan Keister bump go version to fix https://pkg.go.dev/vuln/GO-2025-3751 (#439)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

dependabot bot and others added 13 commits August 14, 2025 00:02
Bumps [github.com/containers/image/v5](https://github.com/containers/image) from 5.35.0 to 5.36.1.
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.35.0...v5.36.1)

---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
  dependency-version: 5.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: d77eaa825d20eddef7dcdc855e1ed6e3a9782d81
Bumps [github.com/operator-framework/api](https://github.com/operator-framework/api) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/operator-framework/api/releases)
- [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md)
- [Commits](operator-framework/api@v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/api
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 3a72bc8a8f86ab36c52d62dbcc0831e323099e4b
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 12a6160a270f5d2d4b11838c9892788b33aad33b
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.22.0 to 1.23.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.22.0...v1.23.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: a7262d29b4b3d061374e638eae3e152982c53e68
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: c83a9517db0be5c693c4d8dd693ae0f6125f45e7
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.42.0 to 0.43.0.
- [Commits](golang/net@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 7ed5c00a1d0c329191da8c7dd7e1b72cb21227a1
Bumps [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) from 6.11.2 to 6.11.3.
- [Release notes](https://github.com/maxbrunsfeld/counterfeiter/releases)
- [Commits](maxbrunsfeld/counterfeiter@v6.11.2...v6.11.3)

---
updated-dependencies:
- dependency-name: github.com/maxbrunsfeld/counterfeiter/v6
  dependency-version: 6.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 3d81ef2102d1d952ca70fc3b48ba1dc263fa0c01
* Enabled readonlyRootFilesystem by default

* Enable in reconciler as well

* Enable in chart templates

* Fix typo

* Ensure volumes and volumeMount objects exists

* Fixing default rorfs for legacy mode and fix tests

* Only enable rorfs when running as non-root user

* Update tests

* Fix errors

* Update unit tests

Upstream-repository: operator-lifecycle-manager
Upstream-commit: 77ae211df6d76cc0163c94263a2c3e0b9fe00138
Upstream-repository: api
Upstream-commit: 042719a89df58ff52f4839291f266ea20d252808
…up (openshift#436)

Bumps the k8s-dependencies group with 1 update: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml).

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: 3d91a6000d347a190bd4ff6f4207d586ed153c5e
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.25.0 to 0.26.0.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: d34b367b6e3347cb481d5931b3e313156dc5f1f3
…penshift#438)

Signed-off-by: grokspawn <jordan@nimblewidget.com>
Upstream-repository: api
Upstream-commit: d6a691fa17280bfc5f17e22e73edb6fcd0b64503
…t#439)

Signed-off-by: grokspawn <jordan@nimblewidget.com>
Upstream-repository: api
Upstream-commit: d2484b6caa59e031ce91b84dee4c334f0d94544f
@openshift-bot openshift-bot added do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Aug 14, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

Details

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-08-12 13:24:50 operator-framework/operator-lifecycle-manager@d77eaa8 dependabot[bot] 🌱 Bump github.com/containers/image/v5 from 5.35.0 to 5.36.1 (#3621)
2025-08-12 13:37:18 operator-framework/operator-lifecycle-manager@3a72bc8 dependabot[bot] 🌱 bump github.com/operator-framework/api from 0.32.0 to 0.33.0 (#3619)
2025-08-12 13:40:32 operator-framework/operator-lifecycle-manager@12a6160 dependabot[bot] Bump actions/checkout from 4 to 5 (#3622)
2025-08-12 13:43:36 operator-framework/operator-lifecycle-manager@a7262d2 dependabot[bot] 🌱 Bump github.com/prometheus/client_golang (#3624)
2025-08-12 13:46:42 operator-framework/operator-lifecycle-manager@c83a951 dependabot[bot] Bump actions/download-artifact from 4 to 5 (#3625)
2025-08-12 13:49:46 operator-framework/operator-lifecycle-manager@7ed5c00 dependabot[bot] 🌱 Bump golang.org/x/net from 0.42.0 to 0.43.0 (#3626)
2025-08-12 15:22:50 operator-framework/operator-lifecycle-manager@3d81ef2 Todd Short 🌱 Bump github.com/maxbrunsfeld/counterfeiter/v6 (#3627)
2025-08-12 20:19:52 operator-framework/operator-lifecycle-manager@77ae211 Allen Ray NO-ISSUE: Enabled readonlyRootFilesystem by default (#3614)
2025-06-23 16:14:49 operator-framework/api@042719a Camila Macedo Upgrade controller-gen from v0.17.2 to v0.18.0 and re-generate CRDs
2025-07-01 11:47:23 operator-framework/api@3d91a60 dependabot[bot] Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in the k8s-dependencies group (#436)
2025-07-15 09:57:13 operator-framework/api@d34b367 dependabot[bot] Bump github.com/google/cel-go from 0.25.0 to 0.26.0 (#437)
2025-07-22 15:04:14 operator-framework/api@d6a691f Jordan Keister normalize unit test targets across repos. add skip/target test args (#438)
2025-07-22 15:20:47 operator-framework/api@d2484b6 Jordan Keister bump go version to fix https://pkg.go.dev/vuln/GO-2025-3751 (#439)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Aug 14, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 14, 2025

@openshift-bot: GitHub didn't allow me to request PR reviews from the following users: openshift/openshift-team-operator-framework.

Note that only openshift members and repo collaborators can review this PR, and authors cannot review their own PRs.

Details

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-08-12 13:24:50 operator-framework/operator-lifecycle-manager@d77eaa8 dependabot[bot] 🌱 Bump github.com/containers/image/v5 from 5.35.0 to 5.36.1 (#3621)
2025-08-12 13:37:18 operator-framework/operator-lifecycle-manager@3a72bc8 dependabot[bot] 🌱 bump github.com/operator-framework/api from 0.32.0 to 0.33.0 (#3619)
2025-08-12 13:40:32 operator-framework/operator-lifecycle-manager@12a6160 dependabot[bot] Bump actions/checkout from 4 to 5 (#3622)
2025-08-12 13:43:36 operator-framework/operator-lifecycle-manager@a7262d2 dependabot[bot] 🌱 Bump github.com/prometheus/client_golang (#3624)
2025-08-12 13:46:42 operator-framework/operator-lifecycle-manager@c83a951 dependabot[bot] Bump actions/download-artifact from 4 to 5 (#3625)
2025-08-12 13:49:46 operator-framework/operator-lifecycle-manager@7ed5c00 dependabot[bot] 🌱 Bump golang.org/x/net from 0.42.0 to 0.43.0 (#3626)
2025-08-12 15:22:50 operator-framework/operator-lifecycle-manager@3d81ef2 Todd Short 🌱 Bump github.com/maxbrunsfeld/counterfeiter/v6 (#3627)
2025-08-12 20:19:52 operator-framework/operator-lifecycle-manager@77ae211 Allen Ray NO-ISSUE: Enabled readonlyRootFilesystem by default (#3614)
2025-06-23 16:14:49 operator-framework/api@042719a Camila Macedo Upgrade controller-gen from v0.17.2 to v0.18.0 and re-generate CRDs
2025-07-01 11:47:23 operator-framework/api@3d91a60 dependabot[bot] Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in the k8s-dependencies group (#436)
2025-07-15 09:57:13 operator-framework/api@d34b367 dependabot[bot] Bump github.com/google/cel-go from 0.25.0 to 0.26.0 (#437)
2025-07-22 15:04:14 operator-framework/api@d6a691f Jordan Keister normalize unit test targets across repos. add skip/target test args (#438)
2025-07-22 15:20:47 operator-framework/api@d2484b6 Jordan Keister bump go version to fix https://pkg.go.dev/vuln/GO-2025-3751 (#439)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 14, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

1 similar comment
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 14, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 14, 2025

@openshift-bot: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/okd-scos-e2e-aws-ovn 54a632c link false /test okd-scos-e2e-aws-ovn

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jianzhangbjz
Copy link
Member

Pre-merge test that NO-ISSUE: Enabled readonlyRootFilesystem by default (#3614). Passed.

1, build an OCP cluster with this unmerged PR via the cluster-bot
launch 4.20,openshift/operator-framework-olm#1046 aws

jiazha-mac:~ jiazha$ oc get clusterversion
NAME      VERSION                                                AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.20.0-0-2025-08-14-022114-test-ci-ln-80y60n2-latest   True        False         59m     Cluster version is 4.20.0-0-2025-08-14-022114-test-ci-ln-80y60n2-latest

2, Install some operators, it works well.
jiazha-mac:~ jiazha$ oc get sub -A
NAMESPACE             NAME                                                            PACKAGE                     SOURCE                CHANNEL
alloydb-omni-system   alloydb-omni-operator                                           alloydb-omni-operator       community-operators   stable
alloydb-omni-system   cert-manager-stable-community-operators-openshift-marketplace   cert-manager                community-operators   stable
openshift-operators   3scale-community-operator                                       3scale-community-operator   community-operators   threescale-2.13

3, Install a custom CatalogSource with the `extractContent`. It works well.
jiazha-mac:~ jiazha$ oc get catalogsource
NAME                  DISPLAY               TYPE   PUBLISHER      AGE
certified-operators   Certified Operators   grpc   Red Hat        88m
community-operators   Community Operators   grpc   Red Hat        88m
cs-cache-jian         Test Operators        grpc   OpenShift QE   3m19s
redhat-marketplace    Red Hat Marketplace   grpc   Red Hat        88m
redhat-operators      Red Hat Operators     grpc   Red Hat        88m

jiazha-mac:~ jiazha$ oc get pods
NAME                                   READY   STATUS    RESTARTS   AGE
certified-operators-z2trj              1/1     Running   0          97s
community-operators-wm4zj              1/1     Running   0          97s
cs-cache-jian-n85xw                    1/1     Running   0          94s
marketplace-operator-bcb49f7cf-f4dhx   1/1     Running   0          98s
redhat-marketplace-55zdx               1/1     Running   0          88s
redhat-operators-j4s6p                 1/1     Running   0          90s

jiazha-mac:~ jiazha$ oc get packagemanifest |grep Test
nginx-operator                                   Test Operators        4m9s

/unhold

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Aug 14, 2025
@openshift-merge-bot openshift-merge-bot bot merged commit 99823e1 into openshift:main Aug 14, 2025
15 of 16 checks passed
@openshift-bot
Copy link
Contributor Author

[ART PR BUILD NOTIFIER]

Distgit: ose-operator-framework-tools
This PR has been included in build ose-operator-framework-tools-container-v4.20.0-202508140543.p0.g99823e1.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Contributor Author

[ART PR BUILD NOTIFIER]

Distgit: operator-registry
This PR has been included in build operator-registry-container-v4.20.0-202508140543.p0.g99823e1.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Contributor Author

[ART PR BUILD NOTIFIER]

Distgit: operator-lifecycle-manager
This PR has been included in build operator-lifecycle-manager-container-v4.20.0-202508140543.p0.g99823e1.assembly.stream.el9.
All builds following this will include this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants