Skip to content

NO-ISSUE: Synchronize From Upstream Repositories #315

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 15 commits into from
Apr 18, 2025

Conversation

openshift-bot
Copy link

@openshift-bot openshift-bot commented Apr 15, 2025

The downstream repository has been updated through the following upstream commit:

Date Commit Author Message
2025-04-15 18:31:12 operator-framework/operator-controller@543f099 Brett Tofel ✨ Check known required permissions for install before installing with the helm applier (#1858)
upstream commit list

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2025-04-12 00:05:51 openshift/operator-framework-operator-controller@3d2f87e dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2025-04-12 00:05:54 openshift/operator-framework-operator-controller@00db80d Todd Short UPSTREAM: <carry>: Fix catalogd.Dockerfile to use new paths
2025-04-12 00:05:56 openshift/operator-framework-operator-controller@189753e Todd Short UPSTREAM: <carry>: Update DOWNSTREAM_OWNERS_ALIASES
2025-04-12 00:05:58 openshift/operator-framework-operator-controller@864c2a1 Catherine Chan-Tse UPSTREAM: <carry>: Add openshift node selector annotation
2025-04-16 09:04:26 openshift/operator-framework-operator-controller@ad55882 Todd Short UPSTREAM: <carry>: Add caalogd-cas-dir option to op-con

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Use proper flags and remove use of logrus and klog

Signed-off-by: Todd Short <[email protected]>
@openshift-bot openshift-bot added tide/merge-method-merge Denotes a PR that should use a standard merge by tide when it merges. kind/sync labels Apr 15, 2025
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Apr 15, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

In response to this:

The downstream repository has been updated through the following upstream commit:

Date Commit Author Message
2025-04-14 19:55:00 operator-framework/operator-controller@51929d2 Todd Short Fix log initialization (#1917)
upstream commit list

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2025-04-12 00:05:51 openshift/operator-framework-operator-controller@3d2f87e dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2025-04-12 00:05:54 openshift/operator-framework-operator-controller@00db80d Todd Short UPSTREAM: <carry>: Fix catalogd.Dockerfile to use new paths
2025-04-12 00:05:56 openshift/operator-framework-operator-controller@189753e Todd Short UPSTREAM: <carry>: Update DOWNSTREAM_OWNERS_ALIASES
2025-04-12 00:05:58 openshift/operator-framework-operator-controller@864c2a1 Catherine Chan-Tse UPSTREAM: <carry>: Add openshift node selector annotation

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Copy link
Contributor

openshift-ci bot commented Apr 15, 2025

@openshift-bot: GitHub didn't allow me to request PR reviews from the following users: openshift/openshift-team-operator-framework.

Note that only openshift members and repo collaborators can review this PR, and authors cannot review their own PRs.

In response to this:

The downstream repository has been updated through the following upstream commit:

Date Commit Author Message
2025-04-14 19:55:00 operator-framework/operator-controller@51929d2 Todd Short Fix log initialization (#1917)
upstream commit list

The vendor/ directory has been updated and the following commits were carried:

Date Commit Author Message
2025-04-12 00:05:51 openshift/operator-framework-operator-controller@3d2f87e dtfranz UPSTREAM: <carry>: Add OpenShift specific files
2025-04-12 00:05:54 openshift/operator-framework-operator-controller@00db80d Todd Short UPSTREAM: <carry>: Fix catalogd.Dockerfile to use new paths
2025-04-12 00:05:56 openshift/operator-framework-operator-controller@189753e Todd Short UPSTREAM: <carry>: Update DOWNSTREAM_OWNERS_ALIASES
2025-04-12 00:05:58 openshift/operator-framework-operator-controller@864c2a1 Catherine Chan-Tse UPSTREAM: <carry>: Add openshift node selector annotation

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-bot openshift-bot added do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Apr 15, 2025
Copy link
Contributor

openshift-ci bot commented Apr 15, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

1 similar comment
Copy link
Contributor

openshift-ci bot commented Apr 15, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jianzhangbjz
Copy link

dependabot bot and others added 5 commits April 15, 2025 12:59
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.7 to 3.8.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.7...3.8)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: '3.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Some log levels were defaultLogLevel+1 (5), change those to defaultLogLevel (4)

Signed-off-by: Todd Short <[email protected]>
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.4.0 to 5.4.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.4.0...v5.4.2)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… the helm applier (#1858)

* permissions preflight: copy necessary kubernetes libs

Signed-off-by: Joe Lanford <[email protected]>

* permissions preflight: kubernetes rbac code modifications

Signed-off-by: Joe Lanford <[email protected]>

* permissions preflight: add preauth implementation

Signed-off-by: Joe Lanford <[email protected]>

* permissions preflight: enable implementation behind feature gate

Signed-off-by: Joe Lanford <[email protected]>

* Rm k8s.io/kubernetes copypasta & import/replace

This is the manual version. Needed to change rbac.go a bit to allow for v1.32.2 code changes, but basically as-was

Signed-off-by: Brett Tofel <[email protected]>

* Adds k8s.io/ lib maintainer tool

go.mod made in the current form the tool generates

Signed-off-by: Brett Tofel <[email protected]>

* Make debug a flag

Signed-off-by: Brett Tofel <[email protected]>

* Small fix, fixes err on kubernetes replace itself

Signed-off-by: Brett Tofel <[email protected]>

* Changes to allow calling as make target

Signed-off-by: Brett Tofel <[email protected]>

* Run go mod tidy post rebase

Signed-off-by: Brett Tofel <[email protected]>

* From rebase - add PreAuthorizer to Helm struct

Signed-off-by: Brett Tofel <[email protected]>

* Fixes to pass linter

Signed-off-by: Brett Tofel <[email protected]>

* Add needed setups to preflightPerm unit tests

Signed-off-by: Brett Tofel <[email protected]>

* Address review comments on rbac.go

rbac_test.go likely coming soon

Signed-off-by: Brett Tofel <[email protected]>

* Add tests for authorization/rbac.go

Signed-off-by: Tayler Geiger <[email protected]>

* Move k8sMaintainer code to its own dir

Signed-off-by: Brett Tofel <[email protected]>

* Run k8smaintainer code post rebase

Signed-off-by: Brett Tofel <[email protected]>

* Lint acceptable format for rbac_test.go

Signed-off-by: Brett Tofel <[email protected]>

* Add tests for authorization/rbac.go

Signed-off-by: Tayler Geiger <[email protected]>

* Refactor inline feature gate check

Signed-off-by: Brett Tofel <[email protected]>

* Change PreAuthorize() return value to []ScopedPolicyRules

Use []ScopedPolicyRules struct for first return value in PreAuthorize()
to avoid issues with random iteration order in previous map return
value.

Signed-off-by: Tayler Geiger <[email protected]>

* Lint acceptable format for rbac_test.go (take 2)

Signed-off-by: Brett Tofel <[email protected]>

* Add fakeStorage dry run for escalationCheck

Signed-off-by: Brett Tofel <[email protected]>

* Revert "Add fakeStorage dry run for escalationCheck"

This reverts commit 2681194ba221b3aeb7b95e1d6c2bedc895449bf8.

* Rename template func to renderClientOnlyRelease

Signed-off-by: Brett Tofel <[email protected]>

* Updated comment on returns of PreAuthorize

Signed-off-by: Brett Tofel <[email protected]>

* Remove repetition in rbac_test.go

Signed-off-by: Tayler Geiger <[email protected]>

* k8smaintainer stage repo version pin logic upgrade

Signed-off-by: Brett Tofel <[email protected]>

* Simplify PreAuthorizer handling via feature gate

Signed-off-by: Brett Tofel <[email protected]>

* Split pre-auth checks cluster-scoped & ns-scoped

Signed-off-by: Brett Tofel <[email protected]>

* Handle missing rules from escalation errors

Also sort final missing rules by namespace

Signed-off-by: Tayler Geiger <[email protected]>

* Clean up escalation error parsing and fix tests

Pass in the clusterextension to PreAuthorize instead of the user.Info
since we need the extension to create the clusterextension/finalizer

Signed-off-by: Tayler Geiger <[email protected]>

* Make tidy after rebase

Signed-off-by: Brett Tofel <[email protected]>

* GCI the files so lint passes

Signed-off-by: Brett Tofel <[email protected]>

* Use slices.SortFunc instead of sort.Slice

Signed-off-by: Tayler Geiger <[email protected]>

* Lift running pre-auth checks out of Helm Apply

Signed-off-by: Brett Tofel <[email protected]>

* Add centralized logging for feature gate status

Signed-off-by: Brett Tofel <[email protected]>

* Err msg reads better

Co-authored-by: Per Goncalves da Silva <[email protected]>

* Run make tidy after rebase

Signed-off-by: Brett Tofel <[email protected]>

* No more magic numbers

Signed-off-by: Brett Tofel <[email protected]>

* Sort components of missing rules lists

Signed-off-by: Brett Tofel <[email protected]>

* Streamline var usage

* Lift to escalationCheckerFor method

Signed-off-by: Brett Tofel <[email protected]>

* Fix lint prealloc err on allMissingPolicyRules

Signed-off-by: Brett Tofel <[email protected]>

* Prealloc missingRulesWithDeduplicatedVerbs

* Tidy verb vars together with comment & issue link

Signed-off-by: Brett Tofel <[email protected]>

* Add comments and protections on  parsing err msg

Signed-off-by: Brett Tofel <[email protected]>

* Improvements to k8smaintainer code

Signed-off-by: Brett Tofel <[email protected]>

* Linter fix for unused byte slice

Signed-off-by: Brett Tofel <[email protected]>

* New target now 'k8s-pin', take ENVVAR for k8s ver

Also separate the target from make tiday and some code cleanup.

Signed-off-by: Brett Tofel <[email protected]>

* Replace x/mod/semver w/ blang - more legible parse

Signed-off-by: Brett Tofel <[email protected]>

* Move EXHELP for k8s-pin target

Signed-off-by: Brett Tofel <[email protected]>

* Update README.md to account for changes

Signed-off-by: Brett Tofel <[email protected]>

* Split permission & resolution error captures

Signed-off-by: Brett Tofel <[email protected]>

* Improve permission regexp matching

Now handles multiple values in any of APIGroups, Resources, or Verbs.
Adds small utility function for trimming and splitting those values into
a string slice.

Signed-off-by: Tayler Geiger <[email protected]>

* Run make k8s-pin post-rebase

Signed-off-by: Brett Tofel <[email protected]>

* Add tests to verify kubernetes API errors vs regex

Signed-off-by: Brett Tofel <[email protected]>

* permissions preflight: refactoring escalation error parser

Signed-off-by: Joe Lanford <[email protected]>

* permission preflight: emit error when encountering unknown policy rule field

Signed-off-by: Joe Lanford <[email protected]>

* permissions preflight: fixup escalation error parser and tests

Signed-off-by: Joe Lanford <[email protected]>

* permissions preflight: add kubernetes compatibility tests, other small fixups

Signed-off-by: Joe Lanford <[email protected]>

* preflight permissions: removing clusterextensions/finalizer patch requirement

The clusterextensions/finalizer requirement comes from the desire to
support clusters where OwnerReferencesPermissionEnforcement plugin is
enabled. This plugin requires "update", but not "patch" for the
clusterextensions/finalizers permission.

See: https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement

Signed-off-by: Joe Lanford <[email protected]>

* Addressing latest round of PR feedback

Signed-off-by: Tayler Geiger <[email protected]>

* Fix linting errors

Signed-off-by: Brett Tofel <[email protected]>

* SingleOwnNSInstallSupport feature gate reset

Signed-off-by: Brett Tofel <[email protected]>

* Fix feature gate logging unhashable hash problem

Signed-off-by: Tayler Geiger <[email protected]>

* Remove duplicate test case

Signed-off-by: Tayler Geiger <[email protected]>

---------

Signed-off-by: Joe Lanford <[email protected]>
Signed-off-by: Brett Tofel <[email protected]>
Signed-off-by: Tayler Geiger <[email protected]>
Co-authored-by: Joe Lanford <[email protected]>
Co-authored-by: Tayler Geiger <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Apr 16, 2025
anik120 added a commit to anik120/operator-framework-operator-controller that referenced this pull request Apr 16, 2025
…y (#1542)

* Makes codecov-action optional

We do not want to fail the job if codecov fails
to upload the report due to rate limiting.

Signed-off-by: Mikalai Radchuk <[email protected]>

* Enable dependabot (#125)

Signed-off-by: Andy Goldstein <[email protected]>

* Enable merge queue (#131)

Signed-off-by: Andy Goldstein <[email protected]>

* Switch to using tilt-support repo

Signed-off-by: Andy Goldstein <[email protected]>

* Add DCO information

Signed-off-by: Andy Goldstein <[email protected]>

* Add CI for tilt (#134)

Signed-off-by: Andy Goldstein <[email protected]>

* Enable CatalogMetadataAPI via explicit flag, fix syncing issues (#138)

* Setup CODEOWNERS (#140)

Signed-off-by: Andy Goldstein <[email protected]>

* Deprecate the `CatalogMetadataAPI` feature gate (#141)

Marking the CatalogMetadataAPI feature gate as Deprecated before introducing the HTTP server as a default mechanism to serve catalog contents

Signed-off-by: Rashmi Gottipati <[email protected]>

* Remove Package and BundleMetadata APIs (#149)

Signed-off-by: Joe Lanford <[email protected]>

* add go-apidiff action (#151)

Signed-off-by: Joe Lanford <[email protected]>

* Store FBC in local directory (#144)

closes #113

Signed-off-by: Anik <[email protected]>

* update demo based on API changes (#154)

Signed-off-by: Jordan Keister <[email protected]>

* Serve locally stored fbc content via an http server (#148)

Closes #113

Signed-off-by: Anik <[email protected]>

* Add metrics to the catalog server (#156)

* add metrics to catalogd http server

that can be used for calculating the Apdex Score
and assess the health of the http server that is
serving catalog contents to clients

Signed-off-by: Bryce Palmer <[email protected]>

* quick fixes from review comments

Signed-off-by: Bryce Palmer <[email protected]>

* rename package from server --> metrics

Signed-off-by: Bryce Palmer <[email protected]>

* rename package from server --> metrics

Signed-off-by: Bryce Palmer <[email protected]>

---------

Signed-off-by: Bryce Palmer <[email protected]>

* (docs): Add docs on fetching contents via HTTP server (#166)

* (docs): Add docs on fetching contents via HTTP server

Signed-off-by: Bryce Palmer <[email protected]>

* add curl examples

Signed-off-by: Bryce Palmer <[email protected]>

---------

Signed-off-by: Bryce Palmer <[email protected]>
Signed-off-by: Bryce Palmer <[email protected]>

* (refactor): Remove deprecated CatalogMetadata and associated code (#169)

* (refactor): Remove deprecated CatalogMetadata and associated code

Signed-off-by: Bryce Palmer <[email protected]>

* go mod tidy

Signed-off-by: Bryce Palmer <[email protected]>

---------

Signed-off-by: Bryce Palmer <[email protected]>

* (server) Expose content URL on CR status (#168)

closes #119

Signed-off-by: Anik <[email protected]>

* deps: bump kubernetes and operator-registry (#173)

Signed-off-by: Joe Lanford <[email protected]>

* Add RELEASING.md (#176)

Add release guide

Signed-off-by: Catherine Chan-Tse <[email protected]>

* Add contribution guide  (#165)

* Add contributing guide to catalogd

Signed-off-by: Rashmi Gottipati <[email protected]>

* Address review comments

Signed-off-by: Rashmi Gottipati <[email protected]>

---------

Signed-off-by: Rashmi Gottipati <[email protected]>

* Update README with simplified make target ref (#178)

Signed-off-by: kevinrizza <[email protected]>

* add default printer columns (#174)

Add default printer columns

Signed-off-by: kevinrizza <[email protected]>

* (cleanup) Kustomization (#183)

Closes #155, #160

Signed-off-by: Anik Bhattacharjee <[email protected]>

* (feature): add direct image registry client `Unpacker` implementation (#145)

(feat): direct image registry client unpacker

Signed-off-by: Bryce Palmer <[email protected]>

* (techdebt): refactor catalog controller unit tests (#196)

* (techdebt): refactor catalog controller unit tests

to no longer use Ginkgo and instead use
the native Go testing and testify

Signed-off-by: Bryce Palmer <[email protected]>

* remove rebase detritus, unnecessary IIFE, and featuregate comments/blocks. goimports.

Signed-off-by: Bryce Palmer <[email protected]>

---------

Signed-off-by: Bryce Palmer <[email protected]>

* Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.10.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.10.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible (#195)

Bump github.com/docker/docker

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.1+incompatible to 23.0.3+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.1...v23.0.3)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* (feature) Implement polling image source in intervals (#185)

Implements https://docs.google.com/document/d/1iWSrWL9pYRJ5Ua3VYErkK1Q2lAusBUeDCh66Ew4lDbQ/edit?usp=sharing

Closes #180

Signed-off-by: Anik Bhattacharjee <[email protected]>

* Add GoDoc for Phase (#199)

GoDoc for Phase

Signed-off-by: Anik Bhattacharjee <[email protected]>

* (feature): add skip-tls-verify option for image sources (#201)

* (feature): add skip-tls-verify option for image sources

Signed-off-by: Bryce Palmer <[email protected]>

* re-generate manifests

Signed-off-by: Bryce Palmer <[email protected]>

---------

Signed-off-by: Bryce Palmer <[email protected]>

* 🌱 Add PR template with icons & verify job (#205)

Add PR template with icons & verify job

Signed-off-by: Andy Goldstein <[email protected]>

* 🌱 Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible (#203)

Bump github.com/docker/docker

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.3+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.3...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :bug: attempt to remove cache entry if unpack fails (#207)

(bugfix): attempt to remove cache entry if unpack fails

and add a new test case that ensures if the required label
is missing from the image, thus failing image unpacking,
an error is consistently returned

fixes #206

Signed-off-by: Bryce Palmer <[email protected]>

* 🌱 Prefix dependabot GH actions PRs (#208)

Prefix dependabot GH actions PRs

Signed-off-by: Andy Goldstein <[email protected]>

* :seedling: replace e2e Job with client-go ProxyGet() call (#210)

(e2e): replace e2e Job with client-go ProxyGet() call

Signed-off-by: Bryce Palmer <[email protected]>

* ✨ Add Ingress overlay to access `Catalog` contents outside of the cluster (#209)

* Add Ingress overlay to access `Catalog` contents outside of the cluster

Signed-off-by: Rashmi Gottipati <[email protected]>

* Address review feedback

Signed-off-by: Rashmi Gottipati <[email protected]>

* Address review feedback #1

Signed-off-by: Rashmi Gottipati <[email protected]>

* Address feedback #2

Signed-off-by: Rashmi Gottipati <[email protected]>

---------

Signed-off-by: Rashmi Gottipati <[email protected]>

* 🌱 bump to k8s 1.27.7 (#211)

bump to k8s 1.27.7

to ensure catalogd is fully remediated and
unaffected by the rapid reset CVE

Signed-off-by: Bryce Palmer <[email protected]>

* :seedling: Remove cert-manager from release note install process (#215)

Remove cert-manager from release note install process

as cert-manager has not been a requirement for installing
catalogd for quite some time.

Signed-off-by: Bryce Palmer <[email protected]>

* :bug: Add enum validation for source type (#214)

Add enum validation for source type

Signed-off-by: Bryce Palmer <[email protected]>

* 🌱  updates to enable autogenerated demo, hosted out-of-tree (#212)

* updates to support automated demo generation

Signed-off-by: Jordan Keister <[email protected]>

* review updates

Signed-off-by: Jordan Keister <[email protected]>

---------

Signed-off-by: Jordan Keister <[email protected]>

* :seedling: demo install from published tag (#217)

* demo install from published tag

Signed-off-by: Jordan Keister <[email protected]>

* review updates

Signed-off-by: Jordan Keister <[email protected]>

---------

Signed-off-by: Jordan Keister <[email protected]>

* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#218)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0 (#220)

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.11.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.4.2...v5.11.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/containerd/containerd from 1.6.22 to 1.6.26 (#219)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.22 to 1.6.26.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.6.22...v1.6.26)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* (bugfix): bump the catalogserver write timeout to 5 minutes (#223)

to allow for fully writing large catalogs contents
in the response

Signed-off-by: everettraven <[email protected]>

* (bugfix): add validation for pollInterval duration units (#225)

Signed-off-by: everettraven <[email protected]>

* (chore): bump supported k8s version to 1.28 (#227)

bumps controller-runtime --> v0.16.3
bumps k8s.io deps --> v0.28.5
bumps operator-registry --> v1.34.0
updated kind version --> v0.20.0
made kind node image configurable and 1.28 by default
updated ginkgo version --> v2.12.0

Signed-off-by: everettraven <[email protected]>

* Bump github.com/containerd/containerd from 1.7.6 to 1.7.11 (#228)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.6 to 1.7.11.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.6...v1.7.11)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#230)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* (bugfix): make garbage collection a runnable (#231)

and add it to the controller manager. Make it log errors instead of
exiting. This prevents crashlooping when there are errors in the
garbage collection process.

Signed-off-by: everettraven <[email protected]>

* bumping codecov-action to v4 (#232)

* GH Actions: add workflow to add epic issues to OLMv1 project (#233)

Signed-off-by: Joe Lanford <[email protected]>

* Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#234)

Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump Go to 1.21 (#237)

Signed-off-by: Mikalai Radchuk <[email protected]>

* bump docker deps to 25.0.5 (#236)

* bump kind to 0.22.0 (#238)

Signed-off-by: Joe Lanford <[email protected]>

* remove terminating space in dependabot config file (#245)

Signed-off-by: Jordan Keister <[email protected]>

* make golangci-lint config consistent across repos (#255)

Signed-off-by: Joe Lanford <[email protected]>

* Bump golang.org/x/net from 0.19.0 to 0.23.0 (#244)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.19.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.19.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump docker/login-action from 2 to 3 (#246)

Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump actions/checkout from 3 to 4 (#247)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#253)

Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-logr/logr/compare/v1.3.0...v1.4.1)

---
updated-dependencies:
- dependency-name: github.com/go-logr/logr
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump actions/add-to-project from 0.5.0 to 1.0.1 (#249)

Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 0.5.0 to 1.0.1.
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](https://github.com/actions/add-to-project/compare/v0.5.0...v1.0.1)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump actions/setup-go from 4 to 5 (#250)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#254)

Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/yaml/compare/v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump kubernetes-sigs/kubebuilder-release-tools (#248)

Bumps [kubernetes-sigs/kubebuilder-release-tools](https://github.com/kubernetes-sigs/kubebuilder-release-tools) from 0.4.0 to 0.4.3.
- [Release notes](https://github.com/kubernetes-sigs/kubebuilder-release-tools/releases)
- [Changelog](https://github.com/kubernetes-sigs/kubebuilder-release-tools/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/kubebuilder-release-tools/compare/v0.4.0...v0.4.3)

---
updated-dependencies:
- dependency-name: kubernetes-sigs/kubebuilder-release-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* OCPBUGS-28230: enforce termination message policy on all platform pods (#260)

Signed-off-by: Joe Lanford <[email protected]>

* bump controller-gen to v0.14.0 (#262)

Signed-off-by: Tayler Geiger <[email protected]>

* ⚠️ Serve catalog over HTTPS (#263)

* make catalog server serve catalog contents over HTTPS

adds cert-manager as a dependency again to create self-signed
certs for the catalog server

Signed-off-by: everettraven <[email protected]>

* fix e2e

Signed-off-by: everettraven <[email protected]>

* Reorganize manifests for cert-manager overlay

This allows the use of alternate certificate managers.

Signed-off-by: Tayler Geiger <[email protected]>

* Reconfigure TLS functionality to use Listener

Fix a few manifest issues as well.

Signed-off-by: Tayler Geiger <[email protected]>

* Add certwatcher for TLS cert and key from controller-runtime

- Add error for missing either tls-key or tls-cert arguments.
- Move server creation and configuration to serverutil

Signed-off-by: Tayler Geiger <[email protected]>

* Update README and docs for HTTPS

---------

Signed-off-by: everettraven <[email protected]>
Signed-off-by: Tayler Geiger <[email protected]>
Co-authored-by: everettraven <[email protected]>

* Makefile: fix issues with repeated evaluations (#267)

* rename Catalog to ClusterCatalog (#268)

Signed-off-by: everettraven <[email protected]>

* ✨ Bump k8s deps to 0.30.0 and go 1.22 (#269)

* bump to go 1.22 and k8s 0.30.0

Signed-off-by: everettraven <[email protected]>

* bump o-reg to tag

Signed-off-by: everettraven <[email protected]>

---------

Signed-off-by: everettraven <[email protected]>

* :seedling: Bump k8s.io/client-go from 0.30.0 to 0.30.1 (#276)

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.30.0 to 0.30.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.0...v0.30.1)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump k8s.io/component-base from 0.28.5 to 0.30.1 (#275)

Bumps [k8s.io/component-base](https://github.com/kubernetes/component-base) from 0.28.5 to 0.30.1.
- [Commits](https://github.com/kubernetes/component-base/compare/v0.28.5...v0.30.1)

---
updated-dependencies:
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump k8s.io/apiserver from 0.28.5 to 0.30.1 (#274)

Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.28.5 to 0.30.1.
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.28.5...v0.30.1)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix XDG_DATA_HOME build issue (#264)

This mirrors the same fix made previously in operator-controller: https://github.com/operator-framework/operator-controller/pull/790

Signed-off-by: Tayler Geiger <[email protected]>

* Change default namespace to olmv1-system (#283)

* :seedling: Bump k8s.io/apiextensions-apiserver from 0.30.0 to 0.30.2 (#284)

Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.30.0 to 0.30.2.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.30.0...v0.30.2)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/containerd/containerd from 1.7.16 to 1.7.18 (#282)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.16 to 1.7.18.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.16...v1.7.18)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix codecov-action params (#287)

* `functionalities` param is no longer exist.
  It was used to enable file fixes to ignore common lines from coverage.
  This feature is now seems to be on by default.

* Adding `disable_search` because we do not need for the codecov action
  to search for coverage files: we explicitly provide files.

Signed-off-by: Mikalai Radchuk <[email protected]>

* Use url.Scheme to determine port number (#289)

Signed-off-by: Todd Short <[email protected]>

* Fixing the labels for better identify metrics (#292)

As the label selector used for both catalogd and operator-controller
metrics services is "control-plane: controller-manager". Hence changing
the labels in both operator-controller and catalogd to make sure we
do not overlap.
Refer
https://github.com/operator-framework/operator-controller/issues/955 for
details

Signed-off-by: Lalatendu Mohanty <[email protected]>

* adding gzip content support (#293)

Signed-off-by: Jordan Keister <[email protected]>

* :seedling: Bump actions/add-to-project from 1.0.1 to 1.0.2 (#291)

Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](https://github.com/actions/add-to-project/compare/v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/prometheus/client_golang (#286)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.19.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.18.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/google/go-containerregistry (#285)

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.19.1 to 0.19.2.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 (#279)

Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2)

---
updated-dependencies:
- dependency-name: github.com/go-logr/logr
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0 (#277)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.3 to 2.19.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.3...v2.19.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/operator-framework/operator-registry (#281)

Bumps [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) from 1.42.0 to 1.43.1.
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](https://github.com/operator-framework/operator-registry/compare/v1.42.0...v1.43.1)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/operator-registry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* check the underlying storage for existing cluster catalog content (#290)

Signed-off-by: Igor Troyanovsky <[email protected]>

* :seedling: Bump github.com/operator-framework/operator-registry (#294)

Bumps [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) from 1.43.1 to 1.44.0.
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](https://github.com/operator-framework/operator-registry/compare/v1.43.1...v1.44.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/operator-registry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Share common CA with OLMv1 in overlays/cert-manager (#296)

Use kustomization Components to share a common ClusterIssuer with
operator-controller.

Fixes #295

Signed-off-by: Todd Short <[email protected]>

* :seedling: Bump github.com/containerd/containerd from 1.7.18 to 1.7.19 (#297)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.18 to 1.7.19.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.18...v1.7.19)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* reduce cpu requests (#298)

Signed-off-by: Jordan Keister <[email protected]>

* Remove second installation of cert-manager (#300)

Signed-off-by: Mikalai Radchuk <[email protected]>

* Bump ginkgo CLI (#301)

Signed-off-by: Mikalai Radchuk <[email protected]>

* :seedling: Bump github.com/google/go-containerregistry (#302)

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.19.2 to 0.20.0.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#303)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.64.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* shift gzip lib to active fork (#311)

Signed-off-by: Jordan Keister <[email protected]>

* Move all packages from /pkg to /internal (#310)

Ahead of an initial 1.0.0 release, we shouldn't preemptively
expose any packages publicly. Instead, let's start my making
any packages internal, and we can expose them publicly
later on. This commit moves everything currently in /pkg
to /internal for now.

Signed-off-by: kevinrizza <[email protected]>

* :seedling: Bump github.com/klauspost/compress from 1.17.8 to 1.17.9 (#312)

Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.8 to 1.17.9.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.17.8...v1.17.9)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/google/go-containerregistry (#315)

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.0 to 0.20.1.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/operator-framework/operator-registry (#319)

Bumps [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](https://github.com/operator-framework/operator-registry/compare/v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/operator-registry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump k8s.io/apiextensions-apiserver from 0.30.2 to 0.30.3 (#320)

Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.30.2 to 0.30.3.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.30.2...v0.30.3)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Include OperatorHub.io ClusterCatalog in releases (#321)

Also adds optional instructions for adding the OperatorHub.io
ClusterCatalog to a cluster.

Signed-off-by: Tayler Geiger <[email protected]>

* ✨ json-lines interface: set content-type, enforce format, document interface (#313)

* set content-type for ndjson

Signed-off-by: Jordan Keister <[email protected]>

* generate json-lines validation data

Signed-off-by: Jordan Keister <[email protected]>

* added docs for interface format

Signed-off-by: Jordan Keister <[email protected]>

---------

Signed-off-by: Jordan Keister <[email protected]>

* :seedling: Bump github.com/containerd/containerd from 1.7.19 to 1.7.20 (#324)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.19 to 1.7.20.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.19...v1.7.20)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add dependabot K8s dependencies group (#322)

Signed-off-by: Mikalai Radchuk <[email protected]>

* add catalogd upgrade test (#314)

Signed-off-by: Ankita Thomas <[email protected]>

* Add installation script (#325)

This follows the release pattern used in operator-controller where an
install.sh script is used for a multi-step installation process. The
OperatorHub ClusterCatalog is also included in the release artifacts.
Also adjusted the Makefile to use the install.sh for deploy.

Signed-off-by: Tayler Geiger <[email protected]>

* Update run-latest-release Makefile target (#326)

* 🌱 Revert 2 previous PRs (#327)

* Revert "Update run-latest-release Makefile target (#326)"

This reverts commit 74de15aa8e50e0764eb7f97c1a667dc41b471a9a.

* Revert "Add installation script (#325)"

This reverts commit bad488ef1e8245db4e2ca7bb90b6ef7a7a3e4f63.

* Add installation script to releases (#328)

This follows the release pattern used in operator-controller where an
install.sh script is used for a multi-step installation process. The
OperatorHub ClusterCatalog is also included in the release artifacts.
Also adjusted the Makefile to use the install.sh for deploy.

Signed-off-by: Tayler Geiger <[email protected]>

* Edit Makefile targets to use install.sh (#329)

Adjusts several Makefile targets to use the new install.sh script.
Includes adjustments to test-upgrade-e2e to use a new target that only
installs the catalogd manifest so cert-manager can still be installed
first for use in the image registry.

Signed-off-by: Tayler Geiger <[email protected]>

* capturing gzip catalog demo as asciicast (#323)

Signed-off-by: Jordan Keister <[email protected]>

* :seedling: Bump github.com/onsi/gomega from 1.33.1 to 1.34.0 (#332)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.1 to 1.34.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.33.1...v1.34.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 (#331)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.0 to 2.19.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.0...v2.19.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#333)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.0 to 1.34.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.34.0...v1.34.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* default-catalogs.yaml: add 10m poll (#335)

* ✨ initial api audit type alignment (#330)

* initial api audit

Signed-off-by: Jordan Keister <[email protected]>

* review resolutions

Signed-off-by: Jordan Keister <[email protected]>

---------

Signed-off-by: Jordan Keister <[email protected]>

* :seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 (#338)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.1 to 2.20.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.1...v2.20.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/google/go-containerregistry (#337)

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.1 to 0.20.2.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.20.1...v0.20.2)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/prometheus/client_golang (#344)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.1 to 1.20.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.20.0/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump the k8s-dependencies group with 6 updates (#343)

* :seedling: Bump the k8s-dependencies group with 6 updates

Bumps the k8s-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.30.3` | `0.31.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.30.3` | `0.31.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.3` | `0.31.0` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.30.3` | `0.31.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.3` | `0.31.0` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.30.3` | `0.31.0` |


Updates `k8s.io/api` from 0.30.3 to 0.31.0
- [Commits](https://github.com/kubernetes/api/compare/v0.30.3...v0.31.0)

Updates `k8s.io/apiextensions-apiserver` from 0.30.3 to 0.31.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.30.3...v0.31.0)

Updates `k8s.io/apimachinery` from 0.30.3 to 0.31.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.3...v0.31.0)

Updates `k8s.io/apiserver` from 0.30.3 to 0.31.0
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.30.3...v0.31.0)

Updates `k8s.io/client-go` from 0.30.3 to 0.31.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.3...v0.31.0)

Updates `k8s.io/component-base` from 0.30.3 to 0.31.0
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.3...v0.31.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump controller-runtime from 0.18.4 to 0.19.0

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Per Goncalves da Silva <[email protected]>

* :seedling: change GVK to use olm.operatorframework.io (#342)

Signed-off-by: Jordan Keister <[email protected]>

* Removing the catalogd from  app.kubernetes.io/name (#347)

As this namespace is shared between catalogd operator-framework-catalogd

Fixes issue #346

Signed-off-by: Lalatendu Mohanty <[email protected]>

* :seedling: Bump github.com/operator-framework/operator-registry from 1.45.0 to 1.46.0 (#345)

* :seedling: Bump github.com/operator-framework/operator-registry

Bumps [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) from 1.45.0 to 1.46.0.
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](https://github.com/operator-framework/operator-registry/compare/v1.45.0...v1.46.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/operator-registry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* bump controller-gen to v0.16.1

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Per Goncalves da Silva <[email protected]>

* ✨ Capture catalog content timestamp in ClusterCatalogStatus (#334)

* Capture catalog content timestamp in ClusterCatalogStatus

Signed-off-by: Rashmi Gottipati <[email protected]>

* address reviews (partial)

Signed-off-by: Rashmi Gottipati <[email protected]>

* address review feedback

Signed-off-by: Rashmi Gottipati <[email protected]>

* Address review comments

Signed-off-by: Rashmi Gottipati <[email protected]>

---------

Signed-off-by: Rashmi Gottipati <[email protected]>

* :seedling: Bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 (#350)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.0 to 2.20.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.0...v2.20.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/prometheus/client_golang (#351)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.0 to 1.20.2.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.0...v1.20.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/containerd/containerd from 1.7.20 to 1.7.21 (#352)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.20 to 1.7.21.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.20...v1.7.21)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Catalog Priority (#353)

Adds an int32 field to allow users to optionally set priority of catalogs. This priority value may be taken into account during bundle selection from multiple catalogs to remove ambiguity.

Signed-off-by: dtfranz <[email protected]>

* add v1.0 and v1.x issues to OLMv1 project automatically (#354)

Signed-off-by: Joe Lanford <[email protected]>

* :seedling: Bump bingo + tools (#358)

* Add bingo-upgrade target to Makefile

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Upgrade bingo tools

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Regenerate manifests

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>

* bugfix: fix printcolumn for lastUnpacked based on json tag and not field name (#361)

Signed-off-by: Rashmi Gottipati <[email protected]>

* :seedling: Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 (#360)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.1 to 2.20.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.1...v2.20.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* :seedling: Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#359)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update cert-manager to v1.15.3 (#367)

Signed-off-by: Todd Short <[email protected]>

* Remove status.phase field from the code and doc references (#368)

Signed-off-by: Todd Short <[email protected]>

* 🌱 Add webhook to add a name label to ClusterCatalogs (#356)

* Add webhook to name label ClusterCatalogs

* Linter fixups

* Added bit more webhook test coverage

* Use catalogd version & clean up TLS args

Signed-off-by: Brett Tofel <[email protected]>

* Fix label name

Signed-off-by: Brett Tofel <[email protected]>

* From stand-alone webhook to operator internal

Signed-off-by: Brett Tofel <[email protected]>

* Think this fixes e2e-upgrade

not sure why PR changes might necessitate this, but it seems legit to delete deployment first

Signed-off-by: Brett Tofel <[email protected]>

* PR review changes so far...

- get MutaingWebhookConfig from kubebuilder;
- stop deleting deployment on only-deploy;
- use the existing matchLabel, stop adding webhook label to operator;
- rename the name label to metadata.name (but not in API yet).

Signed-off-by: Brett Tofel <[email protected]>

* Restore CA issuer config

Signed-off-by: Brett Tofel <[email protected]>

* Fix unit tests

Signed-off-by: Brett Tofel <[email protected]>

* Addresses review comments around TLS cert config

Signed-off-by: Brett Tofel <[email protected]>

* Move RBAC for webhook to kb directive

Signed-off-by: Brett Tofel <[email protected]>

* Move allow-direct-injection to secretTemplate

Signed-off-by: Brett Tofel <[email protected]>

* Make metadata.name an API constant

Signed-off-by: Brett Tofel <[email protected]>

* Use MetaDataNameLabel API constant in log line

Signed-off-by: Brett Tofel <[email protected]>

* Combine cert watchers

Signed-off-by: Brett Tofel <[email protected]>

* Move cert watching back to ctr-rt manager

Signed-off-by: Brett Tofel <[email protected]>

* Address review comments

Signed-off-by: Brett Tofel <[email protected]>

* Address review comments 2

Signed-off-by: Brett Tofel <[email protected]>

---------

Signed-off-by: Brett Tofel <[email protected]>

* Move cert-manager.io patch into tls component (#372)

Signed-off-by: Todd Short <[email protected]>

* :seedling: Bump github.com/prometheus/client_golang (#375)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.20.3/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.3)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add label creation checking in the e2e (#374)

Signed-off-by: Todd Short <[email protected]>

* Add matchCondition to webhook config (#376)

Should add some efficiency as it only lets the webhook fire when needed

Signed-off-by: Brett Tofel <[email protected]>

* Fix matchConditions to be compatible with GenerateName (#382)

Signed-off-by: Todd Short <[email protected]>

* Force a rename of the catalogd certificate (#386)

This will cause the catalogd deployment to restart, meaning that the
catalogd will update quicker (rather than waiting on k8s to update the
certificates via the volume)

Signed-off-by: Todd Short <[email protected]>

* :seedling: Bump github.com/operator-framework/operator-registry (#387)

Bumps [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) from 1.46.0 to 1.47.0.
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](https://github.com/operator-framework/operator-registry/compare/v1.46.0...v1.47.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/operator-registry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 📖 [Docs] Document tilt-support install (#388)

* Document tilt-support install

Signed-off-by: Brett Tofel <[email protected]>

* Improve tilt-support text

Signed-off-by: Brett Tofel <[email protected]>

---------

Signed-off-by: Brett Tofel <[email protected]>

* :seedling: Bump github.com/containerd/containerd from 1.7.21 to 1.7.22 (#391)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.21 to 1.7.22.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.21...v1.7.22)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ✨ Ensure docker registry CA is trusted in e2e tests (#377)

* Ensure docker registry CA is trusted in e2e tests

* Restructure based on feedback

* Fix FS cache for image refs with tags (#394)

Signed-off-by: Mikalai Radchuk <[email protected]>

* Fixes name of httputil test file (#395)

Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>

* Add .idea to .gitignore (#393)

Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>

* Remove TLSVerify/PullSecret fields (#369)

Remove fields that will not have long term support committed to them to
prepare for the v1.0 release.

Removed Fields:
- spec.source.image.insecureSkipTLSVerify
- spec.source.image.pullSecret

GH Issue Ref: #355

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Avoid a network call for digest based images (#396)

Signed-off-by: Mikalai Radchuk <[email protected]>

* :seedling: Bump the k8s-dependencies group with 6 updates (#398)

Bumps the k8s-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.31.0` | `0.31.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.31.0` | `0.31.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.0` | `0.31.1` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.31.0` | `0.31.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.0` | `0.31.1` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.31.0` | `0.31.1` |


Updates `k8s.io/api` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/api/compare/v0.31.0...v0.31.1)

Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.0...v0.31.1)

Updates `k8s.io/apimachinery` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.31.0...v0.31.1)

Updates `k8s.io/apiserver` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.31.0...v0.31.1)

Updates `k8s.io/client-go` from 0.31.0 to 0.31.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.0...v0.31.1)

Updates `k8s.io/component-base` from 0.31.0 to 0.31.1
- [Commits](https://github.com/kubernetes/component-base/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix unnecessary lastUnpacked status updates (#397)

We should not be updating lastUnpacked status fields when
we read from the cache

Signed-off-by: Mikalai Radchuk <[email protected]>

* ✨ unpacker: switch from google/go-containerregistry to containers/image (#399)

* copy containers_image.go from operator-controller

Signed-off-by: Joe Lanford <[email protected]>

* initial modifications for naming and types

Signed-off-by: Joe Lanford <[email protected]>

* unpacker: switch to containers/image-based implementation

Signed-off-by: Joe Lanford <[email protected]>

---------

Signed-off-by: Joe Lanford <[email protected]>

* :seedling: Align ClusterCatalog API godoc with OpenShift API conventions (#390)

* Update godoc strings for ClusterCatalog API

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Regenerate manifests

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Apply suggestions from code review

Text fixes

Co-authored-by: Bryce Palmer <[email protected]>

* Address reviewer comments

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Update api/core/v1alpha1/clustercatalog_types.go

Co-authored-by: Bryce Palmer <[email protected]>

* Apply suggestions from code review

Co-authored-by: Joe Lanford <[email protected]>
Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Bryce Palmer <[email protected]>
Co-authored-by: Joe Lanford <[email protected]>

* Add CI to check if golang version updated (#401)

Signed-off-by: Todd Short <[email protected]>

* Combine the catalogd services (#402)

Only need to define one service for:
* metrics
* webhook
* catalogd itself

Clean up the name of the service (now `catalogd-service`) and any
corresponding resources

Renumber the ports to 7443/8443/9443. The external port for the catalog
server is either 80 or 443.

Signed-off-by: Todd Short <[email protected]>

* Update documentation and default to new service name. (#406)

Signed-off-by: Todd Short <[email protected]>

* fix: make post-upgrade-e2e checks wait for ClusterCatalog to be reconciled (#407)

Signed-off-by: Joe Lanford <[email protected]>

* fix: unpack cache cleanup should ignore missing files (#404)

Signed-off-by: Joe Lanford <[email protected]>

* use controller-runtime Terminal error instead of custom Unrecoverable error (#405)

Signed-off-by: Joe Lanford <[email protected]>

* Refer to the correct location for go-verdiff (#408)

The location is different than the operator-controller repo.

Signed-off-by: Todd Short <[email protected]>

* :seedling: Bump github.com/prometheus/client_golang (#403)

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.3 to 1.20.4.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.3...v1.20.4)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 🐛 Handle finalizers (creation and deletion) better (#411)

* 🐛 Handle finalizers (creation and deletion) better

Closes [409](https://github.com/operator-framework/catalogd/issues/409)

* Move the finalizer setup

Move the finalizer setup out from main.go, and into the controller
code. This allows the finalizers to be initialized and used in the
test code.

Signed-off-by: Todd Short <[email protected]>

* Undo rename of fbcDeletionFinalizer

Signed-off-by: Todd Short <[email protected]>

---------

Signed-off-by: Todd Short <[email protected]>
Co-authored-by: Todd Short <[email protected]>

* ⚠ Status condition clean up (#379)

* ⚠ Status condition clean up

[RFC: Cl…
ci-robot and others added 9 commits April 17, 2025 00:05
Signed-off-by: dtfranz <[email protected]>

UPSTREAM: <carry>: Update generate-manifests to handle new directory

The `default` directory was renamed `base`.

Signed-off-by: Todd Short <[email protected]>

The `base` directory was moved to `base\operator-controller`.

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Drop commitchecker

Signed-off-by: Alexander Greene <[email protected]>

UPSTREAM: <carry>: Updating ose-olm-operator-controller-container image to be consistent with ART
Reconciling with https://github.com/openshift/ocp-build-data/tree/4022cd290f00a44d667dda03f2d78d84a488c7ed/images/ose-olm-operator-controller.yml

UPSTREAM: <carry>: update owners

* Remove alumni from owners
* Add m1kola to approvers

Signed-off-by: Mikalai Radchuk <[email protected]>

UPSTREAM: <carry>: Add pointer to tooling README

UPSTREAM: <carry>: Disable Validating Admission Policy APIs downstream

Signed-off-by: Mikalai Radchuk <[email protected]>

UPSTREAM: <carry>: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16
Reconciling with https://github.com/openshift/ocp-build-data/tree/6250d54c4686a708ca5985afb73080e8ca9a1f7f/images/ose-olm-operator-controller.yml

UPSTREAM: <carry>: Enable Validating Admission Policy APIs downstream

* This reverts commit 3f079c4.
* Includes Validating Admission Policy manifests

Signed-off-by: Mikalai Radchuk <[email protected]>

UPSTREAM: <carry>: manifests: set required-scc for openshift workloads

UPSTREAM: <carry>: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.17
Reconciling with https://github.com/openshift/ocp-build-data/tree/4c1326094222f9209876f06833179a1b9178faf7/images/ose-olm-operator-controller.yml

UPSTREAM: <carry>: add everettraven to approvers+reviewers

Signed-off-by: everettraven <[email protected]>

UPSTREAM: <carry>: add openshift kustomize overlay

to enable TLS communication with catalogd. Configure the CA certs
using the configmap injection method via service-ca-operator

Signed-off-by: everettraven <[email protected]>

UPSTREAM: <carry>: Add tmshort to approvers

Also `s/runtime/framework/g` in the DOWNSTREAM_OWNERS

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.18
Reconciling with https://github.com/openshift/ocp-build-data/tree/dd68246f3237db5db458127566fc7b05b55e1660/images/ose-olm-operator-controller.yml

UPSTREAM: <carry>: Properly copy and call kustomize

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: manifests: add hostPath mount for /etc/containers

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Add test-e2e target for downstream Makefile to be run by openshift/release.

Signed-off-by: dtfranz <[email protected]>

UPSTREAM: <carry>: Add downstream verify makefile target

Signed-off-by: dtfranz <[email protected]>

UPSTREAM: <carry>: openshift: template log verbosity to be managed by cluster-olm-operator

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Add global-pull-secret flag

Pass global-pull-secret to the manager container.

Signed-off-by: Mikalai Radchuk <[email protected]>

UPSTREAM: <carry>: Update openshift CAs to operator-controller

The /run/secrets/kubernetes.io/serviceaccount/ directory is projected
into the pod and contains the following CA certificates:

* configmap/kube-root-ca.crt as ca.crt
* configmap/openshift-service-ca.crt as service-ca.crt

Update the --ca-certs-dir argument to reference the directory.

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Add HowTo for origin tests

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Add e2e registry Dockerfile

Signed-off-by: dtfranz <[email protected]>

UPSTREAM: <carry>: add nodeSelector and tolerations to operator-controller deployment via kustomize patch

Signed-off-by: everettraven <[email protected]>

UPSTREAM: <carry>: namespace: use privileged PSA for audit and warn levels

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Enable downstream e2e

Signed-off-by: dtfranz <[email protected]>

UPSTREAM: <carry>: Remove m1kola from owners

Signed-off-by: Mikalai Radchuk <[email protected]>

UPSTREAM: <carry>: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.19
Reconciling with https://github.com/openshift/ocp-build-data/tree/a39508c86497b4e5e463d7b2c78e51e577be9e7d/images/ose-olm-operator-controller.yml

UPSTREAM: <carry>: generate and mount service-ca server cert

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Add support for proxy trustedCAs

Just map the list of trusted ca certs into the deployment

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Fix error to build the image

Copy correct (new) executable name for operator-controller

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Fix make verify for mac os envs

Joe Lanford <[email protected]>

UPSTREAM: <carry>: Move operator-controller openshift files to its own dir

UPSTREAM: <carry>: Upgrade OCP images from 4.18 to 4.19

UPSTREAM: <carry>: Add Openshift's catalogd manifests

- Move to openshift/catalogd the specific manifest under: https://github.com/openshift/operator-framework-catalogd/tree/main/openshift
- Add call to generate catalogd manifest to 'make manifest'. Make verify test is now done for catalogd and operator-controller Openshift's manifests

UPSTREAM: <carry>: resolve issue with pre-mature mounting of trusted CA configmap

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Add /etc/docker to the operator-controller and catalogd deployments

This allows for use of the any image.config.openshift.io trusted CAs

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: fixup catalogd.Dockerfile paths

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Resolve issue with pre-mature mounting of service CA configmap

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: use projected volume for CAs to avoid subPath limitations

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Revert "UPSTREAM: <carry>: use projected volume for CAs to avoid subPath limitations"

This reverts commit 548caa4.

UPSTREAM: <carry>: use projected volume for CAs to avoid subPath limitations

Signed-off-by: Joe Lanford <[email protected]>

UPSTREAM: <carry>: Remove vet from openshift verify

The `vet` target was removed upstream.

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Skip another upstream test

Signed-off-by: Todd Short <[email protected]>

UPSTREAM: <carry>: Cleanup openshift/Makefile by removing no longer required comments regards catalogd e2e tests

UPSTREAM: <carry>: Enable OCP metrics collection by default

Enables OCP to collect Prometheus metrics for both catalogd and
operator-controller by default. This is accomplished
via ServiceMonitor CRs which are now created for both projects.
The root catalogd directory has been removed

Signed-off-by: Todd Short <[email protected]>
Signed-off-by: Catherine Chan-Tse <[email protected]>
(cherry picked from commit 9b4a113)
@openshift-bot openshift-bot added the lgtm Indicates that a PR is ready to be merged. label Apr 17, 2025
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Apr 17, 2025
@jianzhangbjz
Copy link

Hi @oceanc80, We're holding the downstream PR due to that release blocker issue.
However, this PR contains the feature PR(https://issues.redhat.com/browse/OPRUN-3613), so do we need to merge it before the 4.19 branching cut? If not, its featureGate has already been enabled in openshift/api, do we need to revert it? Thanks! cc: @tmshort @joelanford

@jianzhangbjz
Copy link

Got the approval from Catherine on Slack.
/unhold
/lgtm

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Apr 17, 2025
@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Apr 17, 2025
@grokspawn
Copy link
Contributor

/retest-required

@anik120
Copy link
Contributor

anik120 commented Apr 17, 2025

/test openshift-e2e-aws-techpreview

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD ad55882 and 2 for PR HEAD 68f8273 in total

1 similar comment
@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD ad55882 and 2 for PR HEAD 68f8273 in total

@openshift-bot openshift-bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Apr 18, 2025
@jianzhangbjz
Copy link

/unhold

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Apr 18, 2025
@jianzhangbjz
Copy link

/test openshift-e2e-aws

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD ad55882 and 2 for PR HEAD 68f8273 in total

@tmshort
Copy link
Contributor

tmshort commented Apr 18, 2025

/retest-required

2 similar comments
@grokspawn
Copy link
Contributor

/retest-required

@tmshort
Copy link
Contributor

tmshort commented Apr 18, 2025

/retest-required

Copy link
Contributor

openshift-ci bot commented Apr 18, 2025

@openshift-bot: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/okd-scos-e2e-aws-ovn 68f8273 link false /test okd-scos-e2e-aws-ovn

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@tmshort
Copy link
Contributor

tmshort commented Apr 18, 2025

/assign

@tmshort
Copy link
Contributor

tmshort commented Apr 18, 2025

/retest-required

@joelanford
Copy link
Member

/test openshift-e2e-aws-techpreview

@openshift-merge-bot openshift-merge-bot bot merged commit 355dcf4 into openshift:main Apr 18, 2025
9 of 11 checks passed
@openshift-bot
Copy link
Author

[ART PR BUILD NOTIFIER]

Distgit: ose-olm-catalogd
This PR has been included in build ose-olm-catalogd-container-v4.19.0-202504182344.p0.g355dcf4.assembly.stream.el9.
All builds following this will include this PR.

@openshift-bot
Copy link
Author

[ART PR BUILD NOTIFIER]

Distgit: ose-olm-operator-controller
This PR has been included in build ose-olm-operator-controller-container-v4.19.0-202504182344.p0.g355dcf4.assembly.stream.el9.
All builds following this will include this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. kind/sync lgtm Indicates that a PR is ready to be merged. tide/merge-method-merge Denotes a PR that should use a standard merge by tide when it merges.
Projects
None yet
Development

Successfully merging this pull request may close these issues.