Skip to content

Conversation

@openshift-bot
Copy link
Contributor

@openshift-bot openshift-bot commented Oct 4, 2025

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)
2025-10-09 15:48:06 operator-framework/operator-lifecycle-manager@16f86e1 dependabot[bot] 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#3665)
2025-10-09 15:51:00 operator-framework/operator-lifecycle-manager@f175eae dependabot[bot] 🌱 Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#3667)
2025-10-09 15:53:51 operator-framework/operator-lifecycle-manager@3a6fecc Camila Macedo 🌱 Bump github.com/operator-framework/api from 0.34.0 to 0.35.0 (#3670)
2025-10-10 11:50:49 operator-framework/operator-lifecycle-manager@b650272 dependabot[bot] 🌱 Bump the k8s-dependencies group across 1 directory with 2 updates (#3671)
2025-10-10 12:04:33 operator-framework/operator-lifecycle-manager@589a5d0 Anik Secure metrics endpoint with cntrlr-runtime metrics authz mechanics (#3660)
2025-10-14 14:04:38 operator-framework/operator-lifecycle-manager@47ef860 Jordan Keister bump o-f deps (#3662)
2025-10-17 08:55:53 operator-framework/operator-lifecycle-manager@7b5f17b dependabot[bot] 🌱 Bump sigs.k8s.io/controller-runtime (#3672)
2025-10-17 08:58:32 operator-framework/operator-lifecycle-manager@cab994f dependabot[bot] 🌱 Bump github.com/prometheus/common from 0.66.1 to 0.67.1 (#3673)
2025-10-17 09:01:15 operator-framework/operator-lifecycle-manager@3061363 dependabot[bot] 🌱 Bump golang.org/x/time from 0.13.0 to 0.14.0 (#3674)
2025-10-17 14:55:53 operator-framework/operator-lifecycle-manager@b107642 Justin Pierce Remove use of retracted o/api version (#3679)
2025-10-17 16:29:29 operator-framework/operator-lifecycle-manager@62e3677 Per Goncalves da Silva Add AGENTS.md (#3678)
2025-10-20 15:12:18 operator-framework/operator-lifecycle-manager@971d680 Anik Add OpenShift service-ca support for authenticated metrics endpoints (#3677)
2025-10-23 15:19:16 operator-framework/operator-lifecycle-manager@b1278ee dependabot[bot] 🌱 Bump go.podman.io/image/v5 from 5.37.0 to 5.38.0 (#3680)
2025-10-23 17:38:56 operator-framework/operator-lifecycle-manager@ce26d16 Jian Zhang Fix TOCTOU race condition in ensureInstallPlan (#3682)
2025-10-23 18:40:20 operator-framework/operator-lifecycle-manager@465ea2e Anik Fix container image short names for OpenShift compatibility (#3685)
2025-10-23 18:56:53 operator-framework/operator-lifecycle-manager@ca9fb30 Anik Fix ServiceMonitor RBAC for authenticated metrics endpoints (#3681)
2025-10-24 11:35:29 operator-framework/operator-lifecycle-manager@bdbfb2d Jian Zhang fix: Use rest.HTTPClientFor to create TLS-configured client for metrics authentication (#3686)
2025-09-17 16:16:08 operator-framework/operator-registry@4cceb63 dependabot[bot] Bump the k8s-dependencies group across 1 directory with 6 updates (#1772)
2025-09-22 08:52:47 operator-framework/operator-registry@017ab53 Moritz Wanzenböck Add PodMonitor to supported resources (#1795)
2025-09-30 19:52:34 operator-framework/operator-registry@a5f1128 Joe Lanford release/goreleaser.opm.Dockerfile: parameterize grpc-health-probe version (#1801)
2025-10-03 14:05:07 operator-framework/operator-registry@8d4a5f9 Jordan Keister update o-f/api as prep for release (#1806)
2025-09-03 08:08:39 operator-framework/api@9ba7f1a dependabot[bot] Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#445)
2025-09-03 09:47:34 operator-framework/api@29bdb09 dependabot[bot] Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#446)
2025-09-03 09:56:07 operator-framework/api@37c0110 dependabot[bot] Bump github.com/google/cel-go from 0.26.0 to 0.26.1 (#448)
2025-09-09 07:38:25 operator-framework/api@8835256 dependabot[bot] Bump actions/setup-go from 5 to 6 (#449)
2025-09-09 07:41:23 operator-framework/api@ee2250b dependabot[bot] Bump actions/stale from 9 to 10 (#450)
2025-09-17 16:13:19 operator-framework/api@a7542c5 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#447)
2025-10-03 13:44:27 operator-framework/api@bef2351 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#451)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

@openshift-bot openshift-bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Oct 4, 2025
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Oct 4, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 4, 2025

@openshift-bot: GitHub didn't allow me to request PR reviews from the following users: openshift/openshift-team-operator-framework.

Note that only openshift members and repo collaborators can review this PR, and authors cannot review their own PRs.

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@jianzhangbjz
Copy link
Contributor

/verified by pass
/retest-required

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Oct 9, 2025
@openshift-ci-robot
Copy link

@jianzhangbjz: This PR has been marked as verified by pass.

In response to this:

/verified by pass
/retest-required

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 2c539ec and 2 for PR HEAD c2161a8 in total

@openshift-ci-robot openshift-ci-robot removed the verified Signifies that the PR passed pre-merge verification criteria label Oct 10, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)
2025-10-09 15:48:06 operator-framework/operator-lifecycle-manager@16f86e1 dependabot[bot] 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#3665)
2025-10-09 15:51:00 operator-framework/operator-lifecycle-manager@f175eae dependabot[bot] 🌱 Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#3667)
2025-10-09 15:53:51 operator-framework/operator-lifecycle-manager@3a6fecc Camila Macedo 🌱 Bump github.com/operator-framework/api from 0.34.0 to 0.35.0 (#3670)
2025-09-03 08:08:39 operator-framework/api@9ba7f1a dependabot[bot] Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#445)
2025-09-03 09:47:34 operator-framework/api@29bdb09 dependabot[bot] Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#446)
2025-09-03 09:56:07 operator-framework/api@37c0110 dependabot[bot] Bump github.com/google/cel-go from 0.26.0 to 0.26.1 (#448)
2025-09-09 07:38:25 operator-framework/api@8835256 dependabot[bot] Bump actions/setup-go from 5 to 6 (#449)
2025-09-09 07:41:23 operator-framework/api@ee2250b dependabot[bot] Bump actions/stale from 9 to 10 (#450)
2025-09-17 16:13:19 operator-framework/api@a7542c5 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#447)
2025-10-03 13:44:27 operator-framework/api@bef2351 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#451)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Oct 10, 2025
@jianzhangbjz
Copy link
Contributor

/verified by pass
/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Oct 10, 2025
@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Oct 10, 2025
@openshift-ci-robot
Copy link

@jianzhangbjz: This PR has been marked as verified by pass.

In response to this:

/verified by pass
/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 2c539ec and 2 for PR HEAD 7dfd6be in total

@openshift-ci-robot openshift-ci-robot removed the verified Signifies that the PR passed pre-merge verification criteria label Oct 11, 2025
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Oct 11, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)
2025-10-09 15:48:06 operator-framework/operator-lifecycle-manager@16f86e1 dependabot[bot] 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#3665)
2025-10-09 15:51:00 operator-framework/operator-lifecycle-manager@f175eae dependabot[bot] 🌱 Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#3667)
2025-10-09 15:53:51 operator-framework/operator-lifecycle-manager@3a6fecc Camila Macedo 🌱 Bump github.com/operator-framework/api from 0.34.0 to 0.35.0 (#3670)
2025-10-10 11:50:49 operator-framework/operator-lifecycle-manager@b650272 dependabot[bot] 🌱 Bump the k8s-dependencies group across 1 directory with 2 updates (#3671)
2025-10-10 12:04:33 operator-framework/operator-lifecycle-manager@589a5d0 Anik Secure metrics endpoint with cntrlr-runtime metrics authz mechanics (#3660)
2025-09-03 08:08:39 operator-framework/api@9ba7f1a dependabot[bot] Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#445)
2025-09-03 09:47:34 operator-framework/api@29bdb09 dependabot[bot] Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#446)
2025-09-03 09:56:07 operator-framework/api@37c0110 dependabot[bot] Bump github.com/google/cel-go from 0.26.0 to 0.26.1 (#448)
2025-09-09 07:38:25 operator-framework/api@8835256 dependabot[bot] Bump actions/setup-go from 5 to 6 (#449)
2025-09-09 07:41:23 operator-framework/api@ee2250b dependabot[bot] Bump actions/stale from 9 to 10 (#450)
2025-09-17 16:13:19 operator-framework/api@a7542c5 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#447)
2025-10-03 13:44:27 operator-framework/api@bef2351 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#451)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 11, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jianzhangbjz
Copy link
Contributor

/verified by pass
/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Oct 11, 2025
@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Oct 11, 2025
@openshift-ci-robot
Copy link

@jianzhangbjz: This PR has been marked as verified by pass.

In response to this:

/verified by pass
/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

/retest-required

Remaining retests: 0 against base HEAD 2c539ec and 2 for PR HEAD db015ac in total

@jianzhangbjz
Copy link
Contributor

https://prow.ci.openshift.org/view/gs/test-platform-results/pr-logs/pull/openshift_operator-framework-olm/1120/pull-ci-openshift-operator-framework-olm-main-periodics-images/1976824755369545728 failed at

go build -ldflags "-X github.com/operator-framework/operator-lifecycle-manager/pkg/version.GitCommit=7a48ca6e86f4dcaa6d86b6c7c0507629ca9ea226 -X github.com/operator-framework/operator-lifecycle-manager/pkg/version.OLMVersion=0.0.0-7a48ca6e86f4dcaa6d86b6c7c0507629ca9ea226" -mod=vendor -tags "json1,containers_image_openpgp" -o bin/package-server github.com/operator-framework/operator-lifecycle-manager/cmd/package-server
# k8s.io/kms/apis/v1beta1
vendor/k8s.io/kms/apis/v1beta1/api_grpc.pb.go:52:16: undefined: grpc.SupportPackageIsVersion9
# k8s.io/kms/apis/v2
vendor/k8s.io/kms/apis/v2/api_grpc.pb.go:52:16: undefined: grpc.SupportPackageIsVersion9

grokspawn and others added 23 commits October 24, 2025 13:23
Signed-off-by: grokspawn <[email protected]>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 47ef860077c662d13c3fd5e8a72879b4d33ba51f
Bumps the k8s-dependencies group with 1 update: [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).

Updates `sigs.k8s.io/controller-runtime` from 0.22.2 to 0.22.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 7b5f17b0a41014335e59b03849250ea43dd36492
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.66.1 to 0.67.1.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.66.1...v0.67.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: cab994fc113c4309916f2dde38c48ccad611fb31
Bumps [golang.org/x/time](https://github.com/golang/time) from 0.13.0 to 0.14.0.
- [Commits](golang/time@v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 306136329c07f1567a44ce7fbb68b0caa486f9fa
All importers of this module are forced to use this
same retracted version because it appears greater than
psuedo versions of v0.0.0.

Upstream-repository: operator-lifecycle-manager
Upstream-commit: b1076421af145b4b7d0fcfbc10f389d65840f0b4
* Add AGENTS.md

Signed-off-by: Per Goncalves da Silva <[email protected]>

* Add AGENTS.md

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: Per Goncalves da Silva <[email protected]>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: 62e367788f60c5c52ff7b298e4fbfed47fcf58cf
…(#3677)

Adds support for OpenShift service-ca-operator alongside existing cert-manager support for authenticated metrics
endpoints. This enables the metrics authentication feature to work in both upstream Kubernetes (with cert-manager) and
OpenShift (with service-ca) environments.

 - Add explicit RBAC permissions for `tokenreviews` and `subjectaccessreviews` required by authentication filters
 - Add `serviceCa` configuration section to values.yaml with configurable secret/service names
 - Update deployment templates to support both `certManager` and `serviceCa` modes conditionally
 - Update service templates to conditionally add service-ca annotations when enabled
 - Maintain backward compatibility with existing `certManager` and `monitoring` configurations

Upstream-repository: operator-lifecycle-manager
Upstream-commit: 971d680a2b8726f0a7f93fad1504082a27f87659
Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.37.0 to 5.38.0.
- [Commits](containers/container-libs@image/v5.37.0...image/v5.38.0)

---
updated-dependencies:
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: operator-lifecycle-manager
Upstream-commit: b1278ee97a81311c59163c9927031df266e4365e
Upstream-repository: operator-lifecycle-manager
Upstream-commit: ce26d16fb9c59f03cc234b803fe8d3e40a3c09c0
Replace short image names (nginx:*, bitnami/nginx:*, repo/image:*) with
fully qualified names (docker.io/*) in tests to resolve failures in
OpenShift clusters with container image short name enforcement enabled.

Upstream-repository: operator-lifecycle-manager
Upstream-commit: 465ea2eea9319a41e3ab9abe038d888c3abe1c2d
* ServiceMonitor RBAC for authenticated metrics endpoints

Add additional permission to allow Prometheus in OCP
to access authenticated metrics without HTTP 500 errors.

* Skip metrics e2e tests for now

Upstream-repository: operator-lifecycle-manager
Upstream-commit: ca9fb302aeff6f375120a0817dc9d201e5bbcbbb
…cs authentication (#3686)

Upstream-repository: operator-lifecycle-manager
Upstream-commit: bdbfb2d6b975ee9a0fabef0b8ded86502763bd97
…772)

* Bump the k8s-dependencies group across 1 directory with 6 updates

Bumps the k8s-dependencies group with 4 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver), [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) and [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind).

Updates `k8s.io/api` from 0.33.4 to 0.34.0
- [Commits](kubernetes/api@v0.33.4...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.4 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.33.4...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.0
- [Commits](kubernetes/apimachinery@v0.33.4...v0.34.0)

Updates `k8s.io/client-go` from 0.33.4 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.4...v0.34.0)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0)

Updates `sigs.k8s.io/kind` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/kubernetes-sigs/kind/releases)
- [Commits](kubernetes-sigs/kind@v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/kind
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* Fix failing unit test

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Per Goncalves da Silva <[email protected]>
Upstream-repository: operator-registry
Upstream-commit: 4cceb63e701e57b47e62d0b08a152b172b9d2b18
PodMonitor is a useful resource when monitoring a set of Pods that do not have
a dedicated Service resource associated. This is helpful if the only reason to
add them to a Service would be to configure monitoring.

Fixes #1688

Signed-off-by: Moritz Wanzenböck <[email protected]>
Upstream-repository: operator-registry
Upstream-commit: 017ab5353fec264c1fb1381b5d7088bb77b53b82
…sion (#1801)

Signed-off-by: Joe Lanford <[email protected]>
Upstream-repository: operator-registry
Upstream-commit: a5f1128789836e8e1d1569b6f3fb47b8194deb86
Signed-off-by: grokspawn <[email protected]>
Upstream-repository: operator-registry
Upstream-commit: 8d4a5f96f8c65249eec876ea8e020a091aaea7e4
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.9.1 to 1.10.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.9.1...v1.10.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: 9ba7f1aed6694a018c4567687ce5713cd42d59e0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.11.0 to 1.11.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: 29bdb094429b6513b7f67e9fb98032733f3fca90
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: 37c01109c7439359dc9e32bb1f422c447f686d39
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: 8835256d600108633a3285059321543a3709cafc
Bumps [actions/stale](https://github.com/actions/stale) from 9 to 10.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v9...v10)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: ee2250bf0d6fa0465b25395927f38ecd4a8d97e1
* Bump the k8s-dependencies group with 5 updates

Bumps the k8s-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.4` | `0.34.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.33.4` | `0.34.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.4` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.4` | `0.34.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.0` |

Updates `k8s.io/api` from 0.33.4 to 0.34.0
- [Commits](kubernetes/api@v0.33.4...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.4 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.33.4...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.0
- [Commits](kubernetes/apimachinery@v0.33.4...v0.34.0)

Updates `k8s.io/client-go` from 0.33.4 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.4...v0.34.0)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate resources

Signed-off-by: Per Goncalves da Silva <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Per Goncalves da Silva <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Per Goncalves da Silva <[email protected]>
Upstream-repository: api
Upstream-commit: a7542c56065a50a1ce833c07edcb27f3e85141cd
Bumps the k8s-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.0` | `0.34.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.0` | `0.34.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.0` | `0.34.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.0` | `0.34.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.0` | `0.22.1` |

Updates `k8s.io/api` from 0.34.0 to 0.34.1
- [Commits](kubernetes/api@v0.34.0...v0.34.1)

Updates `k8s.io/apiextensions-apiserver` from 0.34.0 to 0.34.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.0...v0.34.1)

Updates `k8s.io/apimachinery` from 0.34.0 to 0.34.1
- [Commits](kubernetes/apimachinery@v0.34.0...v0.34.1)

Updates `k8s.io/client-go` from 0.34.0 to 0.34.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.0...v0.34.1)

Updates `sigs.k8s.io/controller-runtime` from 0.22.0 to 0.22.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upstream-repository: api
Upstream-commit: bef2351bb84e27fb2deee8ee78e0d670120efb8f
@openshift-ci-robot openshift-ci-robot removed the verified Signifies that the PR passed pre-merge verification criteria label Oct 24, 2025
@openshift-ci-robot
Copy link

@openshift-bot: This pull request explicitly references no jira issue.

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message
2025-10-03 19:09:56 operator-framework/operator-lifecycle-manager@99f5f8b dependabot[bot] 🌱 Bump the k8s-dependencies group with 10 updates (#3638)
2025-10-09 15:48:06 operator-framework/operator-lifecycle-manager@16f86e1 dependabot[bot] 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#3665)
2025-10-09 15:51:00 operator-framework/operator-lifecycle-manager@f175eae dependabot[bot] 🌱 Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#3667)
2025-10-09 15:53:51 operator-framework/operator-lifecycle-manager@3a6fecc Camila Macedo 🌱 Bump github.com/operator-framework/api from 0.34.0 to 0.35.0 (#3670)
2025-10-10 11:50:49 operator-framework/operator-lifecycle-manager@b650272 dependabot[bot] 🌱 Bump the k8s-dependencies group across 1 directory with 2 updates (#3671)
2025-10-10 12:04:33 operator-framework/operator-lifecycle-manager@589a5d0 Anik Secure metrics endpoint with cntrlr-runtime metrics authz mechanics (#3660)
2025-10-14 14:04:38 operator-framework/operator-lifecycle-manager@47ef860 Jordan Keister bump o-f deps (#3662)
2025-10-17 08:55:53 operator-framework/operator-lifecycle-manager@7b5f17b dependabot[bot] 🌱 Bump sigs.k8s.io/controller-runtime (#3672)
2025-10-17 08:58:32 operator-framework/operator-lifecycle-manager@cab994f dependabot[bot] 🌱 Bump github.com/prometheus/common from 0.66.1 to 0.67.1 (#3673)
2025-10-17 09:01:15 operator-framework/operator-lifecycle-manager@3061363 dependabot[bot] 🌱 Bump golang.org/x/time from 0.13.0 to 0.14.0 (#3674)
2025-10-17 14:55:53 operator-framework/operator-lifecycle-manager@b107642 Justin Pierce Remove use of retracted o/api version (#3679)
2025-10-17 16:29:29 operator-framework/operator-lifecycle-manager@62e3677 Per Goncalves da Silva Add AGENTS.md (#3678)
2025-10-20 15:12:18 operator-framework/operator-lifecycle-manager@971d680 Anik Add OpenShift service-ca support for authenticated metrics endpoints (#3677)
2025-10-23 15:19:16 operator-framework/operator-lifecycle-manager@b1278ee dependabot[bot] 🌱 Bump go.podman.io/image/v5 from 5.37.0 to 5.38.0 (#3680)
2025-10-23 17:38:56 operator-framework/operator-lifecycle-manager@ce26d16 Jian Zhang Fix TOCTOU race condition in ensureInstallPlan (#3682)
2025-10-23 18:40:20 operator-framework/operator-lifecycle-manager@465ea2e Anik Fix container image short names for OpenShift compatibility (#3685)
2025-10-23 18:56:53 operator-framework/operator-lifecycle-manager@ca9fb30 Anik Fix ServiceMonitor RBAC for authenticated metrics endpoints (#3681)
2025-10-24 11:35:29 operator-framework/operator-lifecycle-manager@bdbfb2d Jian Zhang fix: Use rest.HTTPClientFor to create TLS-configured client for metrics authentication (#3686)
2025-09-17 16:16:08 operator-framework/operator-registry@4cceb63 dependabot[bot] Bump the k8s-dependencies group across 1 directory with 6 updates (#1772)
2025-09-22 08:52:47 operator-framework/operator-registry@017ab53 Moritz Wanzenböck Add PodMonitor to supported resources (#1795)
2025-09-30 19:52:34 operator-framework/operator-registry@a5f1128 Joe Lanford release/goreleaser.opm.Dockerfile: parameterize grpc-health-probe version (#1801)
2025-10-03 14:05:07 operator-framework/operator-registry@8d4a5f9 Jordan Keister update o-f/api as prep for release (#1806)
2025-09-03 08:08:39 operator-framework/api@9ba7f1a dependabot[bot] Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#445)
2025-09-03 09:47:34 operator-framework/api@29bdb09 dependabot[bot] Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#446)
2025-09-03 09:56:07 operator-framework/api@37c0110 dependabot[bot] Bump github.com/google/cel-go from 0.26.0 to 0.26.1 (#448)
2025-09-09 07:38:25 operator-framework/api@8835256 dependabot[bot] Bump actions/setup-go from 5 to 6 (#449)
2025-09-09 07:41:23 operator-framework/api@ee2250b dependabot[bot] Bump actions/stale from 9 to 10 (#450)
2025-09-17 16:13:19 operator-framework/api@a7542c5 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#447)
2025-10-03 13:44:27 operator-framework/api@bef2351 dependabot[bot] Bump the k8s-dependencies group with 5 updates (#451)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/cc @openshift/openshift-team-operator-framework

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Oct 24, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 24, 2025

New changes are detected. LGTM label has been removed.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Oct 24, 2025

@openshift-bot: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-gcp-olm-flaky c2161a8 link false /test e2e-gcp-olm-flaky
ci/prow/periodics-images 433213c link true /test periodics-images
ci/prow/e2e-gcp-console-olm 433213c link true /test e2e-gcp-console-olm
ci/prow/e2e-upgrade 433213c link true /test e2e-upgrade
ci/prow/images 433213c link true /test images
ci/prow/e2e-gcp-olm 433213c link true /test e2e-gcp-olm
ci/prow/verify-deps 433213c link true /test verify-deps
ci/prow/okd-scos-e2e-aws-ovn 433213c link false /test okd-scos-e2e-aws-ovn
ci/prow/okd-scos-images 433213c link true /test okd-scos-images
ci/prow/e2e-aws-olmv0-ext 433213c link true /test e2e-aws-olmv0-ext
ci/prow/e2e-gcp-ovn 433213c link true /test e2e-gcp-ovn

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot openshift-merge-bot bot merged commit 433213c into openshift:main Oct 24, 2025
5 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.