Bumping to [email protected] and rhel-9.5.

.github/workflows/codeql-analysis.yml

@@ -43,7 +43,7 @@ jobs:
     - if: matrix.language == 'go'
       uses: actions/setup-go@v4
       with:
-        go-version: '1.21'
+        go-version: '1.22'
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

Dockerfile

@@ -27,7 +27,7 @@ ARG TARGET
 RUN git config --global --add safe.directory ${PWD}
 RUN make ${TARGET}
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 
 ARG TARGET
 

Dockerfile.must-gather

@@ -1,6 +1,6 @@
 FROM quay.io/openshift/origin-cli:4.20 as builder
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 
 RUN microdnf update -y \
     && microdnf install -y tar rsync findutils gzip iproute util-linux shadow-utils \

Dockerfile.signimage

@@ -1,11 +1,11 @@
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4 as ksource
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5 as ksource
 
 # install the package that will contain the sign utilities
 RUN microdnf update -y && \
     microdnf install -y kernel-devel && \
     microdnf clean all
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 
 COPY --from=ksource /usr/src/kernels/*/scripts/sign-file /usr/local/bin/
 

Dockerfile.webhook

@@ -25,7 +25,7 @@ COPY .git .git
 RUN git config --global --add safe.directory ${PWD}
 RUN make webhook-server
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 
 COPY --from=builder /opt/app-root/src/webhook-server /usr/local/bin/webhook-server
 

Dockerfile.worker

@@ -24,7 +24,7 @@ COPY .git .git
 RUN git config --global --add safe.directory ${PWD}
 RUN ["make", "worker"]
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 
 RUN microdnf update -y && \
     microdnf install -y kmod shadow-utils && \

Makefile

@@ -238,7 +238,7 @@ undeploy-hub: ## Undeploy controller from the K8s cluster specified in ~/.kube/c
 CONTROLLER_GEN = $(shell pwd)/bin/controller-gen
 .PHONY: controller-gen
 controller-gen: ## Download controller-gen locally if necessary.
-	$(call go-get-tool,$(CONTROLLER_GEN),sigs.k8s.io/controller-tools/cmd/controller-gen@v0.14.0)
+	$(call go-get-tool,$(CONTROLLER_GEN),sigs.k8s.io/controller-tools/cmd/controller-gen@v0.16.1)
 
 GOLANGCI_LINT = $(shell pwd)/bin/golangci-lint
 .PHONY: golangci-lint

bundle-hub/manifests/kernel-module-management-hub.clusterserviceversion.yaml

@@ -37,7 +37,7 @@ metadata:
         }
       ]
     capabilities: Basic Install
-    createdAt: "2024-09-08T06:59:15Z"
+    createdAt: "2024-11-27T11:44:06Z"
     operatorframework.io/suggested-namespace: openshift-kmm-hub
     operators.operatorframework.io/builder: operator-sdk-v1.32.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
@@ -108,21 +108,7 @@ spec:
           - ""
           resources:
           - nodes
-          verbs:
-          - get
-          - list
-          - watch
-        - apiGroups:
-          - ""
-          resources:
           - secrets
-          verbs:
-          - get
-          - list
-          - watch
-        - apiGroups:
-          - ""
-          resources:
           - serviceaccounts
           verbs:
           - get

bundle/manifests/kernel-module-management.clusterserviceversion.yaml

@@ -63,7 +63,7 @@ metadata:
         }
       ]
     capabilities: Basic Install
-    createdAt: "2024-09-08T06:59:14Z"
+    createdAt: "2024-11-27T11:44:05Z"
     operatorframework.io/suggested-namespace: openshift-kmm
     operators.operatorframework.io/builder: operator-sdk-v1.32.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
@@ -165,6 +165,7 @@ spec:
           - ""
           resources:
           - configmaps
+          - pods
           verbs:
           - create
           - delete
@@ -176,42 +177,16 @@ spec:
           - ""
           resources:
           - namespaces
-          verbs:
-          - get
-          - list
-          - patch
-          - watch
-        - apiGroups:
-          - ""
-          resources:
           - nodes
           verbs:
           - get
           - list
           - patch
           - watch
-        - apiGroups:
-          - ""
-          resources:
-          - pods
-          verbs:
-          - create
-          - delete
-          - get
-          - list
-          - patch
-          - watch
         - apiGroups:
           - ""
           resources:
           - secrets
-          verbs:
-          - get
-          - list
-          - watch
-        - apiGroups:
-          - ""
-          resources:
           - serviceaccounts
           verbs:
           - get
@@ -229,6 +204,8 @@ spec:
           - kmm.sigs.x-k8s.io
           resources:
           - modules
+          - preflightvalidations/status
+          - preflightvalidationsocp
           verbs:
           - get
           - list
@@ -239,12 +216,15 @@ spec:
           - kmm.sigs.x-k8s.io
           resources:
           - modules/finalizers
+          - preflightvalidations/finalizers
+          - preflightvalidationsocp/finalizers
           verbs:
           - update
         - apiGroups:
           - kmm.sigs.x-k8s.io
           resources:
           - modules/status
+          - preflightvalidationsocp/status
           verbs:
           - get
           - patch
@@ -285,46 +265,6 @@ spec:
           - patch
           - update
           - watch
-        - apiGroups:
-          - kmm.sigs.x-k8s.io
-          resources:
-          - preflightvalidations/finalizers
-          verbs:
-          - update
-        - apiGroups:
-          - kmm.sigs.x-k8s.io
-          resources:
-          - preflightvalidations/status
-          verbs:
-          - get
-          - list
-          - patch
-          - update
-          - watch
-        - apiGroups:
-          - kmm.sigs.x-k8s.io
-          resources:
-          - preflightvalidationsocp
-          verbs:
-          - get
-          - list
-          - patch
-          - update
-          - watch
-        - apiGroups:
-          - kmm.sigs.x-k8s.io
-          resources:
-          - preflightvalidationsocp/finalizers
-          verbs:
-          - update
-        - apiGroups:
-          - kmm.sigs.x-k8s.io
-          resources:
-          - preflightvalidationsocp/status
-          verbs:
-          - get
-          - patch
-          - update
         - apiGroups:
           - authentication.k8s.io
           resources: