Skip to content

Release Sync to v0.9.0 #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 104 commits into
base: konflux
Choose a base branch
from
Open

Release Sync to v0.9.0 #60

wants to merge 104 commits into from
+20,048 −20,081

Conversation

Vincent056
Copy link

No description provided.

@openshift-ci openshift-ci bot requested a review from saschagrunert May 7, 2025 00:37
@Vincent056 Vincent056 mentioned this pull request May 7, 2025
Closed
saschagrunert
saschagrunert approved these changes May 7, 2025
View reviewed changes
Copy link
Member

@saschagrunert saschagrunert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/retest

@openshift-ci openshift-ci bot added lgtm Indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels May 7, 2025
@rhmdnd
Copy link

rhmdnd commented May 7, 2025

Review the 1.23 bump in openshift/release#64599

Are we good to rekick the tests once that lands?

@Vincent056
Copy link
Author

/retest

1 similar comment
@Vincent056
Copy link
Author

/retest

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label May 9, 2025
@Vincent056
Copy link
Author

Pulled in MULTIARCH-4654: Enabled the Security Profiles Operator for ppc64le

rhmdnd
rhmdnd approved these changes May 27, 2025
View reviewed changes
Copy link

@rhmdnd rhmdnd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label May 27, 2025
@openshift-ci OpenShift CI
Copy link

openshift-ci bot commented May 27, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rhmdnd, saschagrunert, Vincent056

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 28, 2025
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label May 28, 2025
@openshift-ci OpenShift CI
Copy link

openshift-ci bot commented May 28, 2025

New changes are detected. LGTM label has been removed.

ccojocar added 9 commits May 28, 2025 00:58
@ccojocar @Vincent056
Harden the spo and bpf-recorder containers with custom apparmor profiles
6abb5d6 
Change-Id: Iccb89ec24d4f513acff9d7828dea6a4ab3c33ef1
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Fix typos
6c3d1b0 
Change-Id: I8a4f7031c81fe1f47f1a0a55276b415bb6d59732
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Update seccomp and apaprmorprofile
e72ea99 
Change-Id: Ie5183b2d1f0550ab463f4c3d0fd713d1de6ec39b
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Add the missing syscalls in the seccomp profile required to remove pr…
91de5fb 
…ofiles

Change-Id: I913f1d20563311b5bb40b5f29293f1235a76a6d3
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Implement the apparmor_profile_audit_total metric
e148b25 
Change-Id: I53ac7c317d2a86d3cb086b189f707e492f3aff0b
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Ignore gocritic warning
9681396 
Change-Id: I48d3f2c159da7e30e6745ba3c29a0565d5788818
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Add the profile name to apparmor_profile_error_total metric
89323a0 
Change-Id: I0706d004ac42d9df6c21a87b1c032c280ddae8a7
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Use a metric label name instead of reason inside of apparmor_profile_…
797f73f 
…audit_total

Change-Id: I449d6c7a3b1a5e1c46b70bf57c84545d73124cbe
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Add a metric for apparmor profile denail
cfc0de5 
Add a metric which counts the total number of operations denined for a
apparmor profile.

Change-Id: I660500bf929cdd05e08a15a01681d5444739fc5b
Signed-off-by: Cosmin Cojocar <[email protected]>
dependabot bot and others added 22 commits May 28, 2025 00:58
@dependabot @Vincent056
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
876cc33 
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](go-jose/go-jose@v4.0.4...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @Vincent056
build(deps): bump ubi8/go-toolset from bfe2159 to 8a9106c
d0606f6 
Bumps ubi8/go-toolset from `bfe2159` to `8a9106c`.

---
updated-dependencies:
- dependency-name: ubi8/go-toolset
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@saschagrunert @Vincent056
Update go to v1.24
eb28727 
Signed-off-by: Sascha Grunert <[email protected]>
@ccojocar @Vincent056
Change the scope of security profiles CRDs to be cluster wide
e5aeb7b 
Change-Id: I3aac182eb0afea485fd8e1488a0426265dbdd3f9
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Remove the namespace from example profiles used by the e2e
1720c05 
Change-Id: I7fa534ff135e099cf045e59feb570c974fb4aa3e
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Update bundle
46f6b00 
Change-Id: I4a8c8343c360ea8835effe94b90dded6da624053
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Update the documentation to reflect the cluster scope for security
0b21319 
profiles

Change-Id: Idd5bcf88cee3c53f7a7b3a22fd7d58750a6d2b9b
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Adapt the olm e2e tests to run with a cluster wide seccompprofile CR
47f53ea 
Change-Id: I4725a64d12d51adc4d82d68d89a50e702cf57358
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Clean profiles namesapce from e2e tests
4614aea 
Change-Id: I620fbf8e02a72f94a1f32586b775ea9c48ed15b5
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Clean up the unsed namesapce from e2e functions
78f6c03 
Change-Id: I64497103b12ff8773a46c90c95bc260dd9178e92
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
More cleanup
d241bad 
Change-Id: Ib755361811381bc12769a17926a8ece42564d4ab
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Fix logenricher e2e test
ed4fc93 
Change-Id: I7ecc5fbc6ff911912981ba9a4e9fb1889ee4270a
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Remove the namespace from e2e tests
ec9dc66 
Change-Id: I75c736be4c103543c963152a6be143c3f0418c4e
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Fix lint warning
6c96fea 
Change-Id: Ic46ac8f56d0e28f1f1d477f1230cead7229d6d5c
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Exit immediately when a command fails in e2e-olm tests
9a0dfc2 
Change-Id: If72ac060fbe381c2e2a1f889fff1d5908286ec48
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Remove checks when using a custom namespace
39add06 
Change-Id: I4ee9ea50a4c4e65fbfb82db4532274d5e65bcc87
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Disable the eBPF recorder in fedora e2e tests since seccomp is disabled
0b79579 
Change-Id: I45e2ae0529f54adab7b15899c8b5276776266964
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Remove the namespace from seccompprofile reference
56efb48 
Change-Id: Ie1b81affb79d9530da9b56afbdec523a78fe5695
Signed-off-by: Cosmin Cojocar <[email protected]>
@ccojocar @Vincent056
Remove the namespace from security profiles path
c7ca547 
Change-Id: I34c8a88d0af12a567b03c968fa1cdfe68ae68fc4
Signed-off-by: Cosmin Cojocar <[email protected]>
@saschagrunert @Vincent056
Bump to v0.9.0
7d25001 
Signed-off-by: Sascha Grunert <[email protected]>
@ngopalak-redhat @Vincent056
Cherry Pick Fix RHEL 9 for openshift dev
465fd3e
@pranitaT @Vincent056
MULTIARCH-4654: Enabled the Security Profiles Operator for ppc64le, a…
9bc99f9 
…dded fixes for seccomp and SELinux profiles, and verified functionality with logenricher.

Signed-off-by: Pranita Turrey <[email protected]>
@openshift-merge-robot openshift-merge-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 28, 2025
@Vincent056
Migrate Tekton pipelines to new branching stretegy
fea2ad4 
    Switches multi-arch and bundle Tekton pipeline definitions to new files and conventions, aligning with rhel9-4-els/rhel-minimal as the build base

    Removes legacy pipeline config, adds new ones for Konflux branch, and updates rpm lockfile to match rhel9-4-els. Ensures consistent build and security scanning workflows across build and bundle images.
@Vincent056
Copy link
Author

/retest

@openshift-ci OpenShift CI
Copy link

openshift-ci bot commented May 28, 2025

@Vincent056: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-operator d4a38d7 link true /test e2e-operator
ci/prow/e2e-flaky d4a38d7 link true /test e2e-flaky

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@saschagrunert saschagrunert saschagrunert approved these changes

@rhmdnd rhmdnd rhmdnd approved these changes

Assignees

@saschagrunert saschagrunert

@rhmdnd rhmdnd

Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
9 participants
@Vincent056 @rhmdnd @saschagrunert @openshift-merge-robot @ccojocar @mhils @dcoppa @ngopalak-redhat @pranitaT