Skip to content

NO-ISSUE: Merge upstream#465

Open
honza wants to merge 82 commits intoopenshift:mainfrom
honza:merge-upstream-2026-03-04
Open

NO-ISSUE: Merge upstream#465
honza wants to merge 82 commits intoopenshift:mainfrom
honza:merge-upstream-2026-03-04

Conversation

@honza
Copy link
Member

@honza honza commented Mar 4, 2026

No description provided.

dtantsur and others added 30 commits February 3, 2026 13:43
GetFirmwareComponents is called each time, which creates a lot of
logging. Only log the components when the list changes.

Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>
Currently, the controller does not save the status if only the
generation changes, leading to an observed generation mismatch on the
ChangeDetected condition.

Meanwhile, the servicing code assumes that there are no updates when
generations mismatch, even if the condition is true.

This patch fixes the controller and makes the servicing code retry
if generations do not match.

Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>
Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>
Dependabot is trying to bump to 1.19.x which needs golang bump,
doing 1.18.x bump manually for open vuln.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.39.0 to 1.39.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.0...v1.39.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/test/main/github.com/onsi/gomega-1.39.1

🌱 Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 in /test
🐛 Correctly handle resource generations for HFC and HFS
The reapprover workflow does not seem to trigger most of the times.
One probable cause is race condition of pull request workflows being
created and this one running. This one might run before the workflows
are created, so it doesn't approve them as it doesn't see them.

Also, remove open/ready_for_review triggers as those are not relevant
for this workflow. Add labeled instead, so adding /ok-to-test should
trigger this and approve the workflows.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>
Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>
…int-lists

🌱 enforce ol-prefix 'one' style for ordered lists
Five conditions are defined and handled: Manageable,
AvailableForProvisioning, Provisioned, Ready and Progressing.

Partially implements metal3-io#2888

Signed-off-by: Pierre Crégut <pierre.cregut@orange.com>
🐛 Do not log firmware components on each BMH reconciliation
…tions

✨ Conditions implementation for BareMetalHosts
Avoid cleanup issues by using a fresh cluster for each upgrade test.
We create a separate kind cluster for each upgrade test. These "upgrade
clusters" use a separate provisioning IP than the normal kind cluster in
order to be able to co-exist without issues. However, all the upgrade
tests use the same IP, so they must run one at a time.

Put all logs directly in the logs folder instead of under init-bmo,
init-ironic or similar. This is because the log watchers still pick up
the "other" deployments so we get confusing duplicates. Better then to
have all in the same folder so it is obvious one needs to check which is
which. We could improve this later by canceling log watches explicitly
when they are no longer needed.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>
Bumps the kubernetes group with 3 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/component-base](https://github.com/kubernetes/component-base).
Bumps the kubernetes group with 1 update in the /apis directory: [k8s.io/api](https://github.com/kubernetes/api).
Bumps the kubernetes group with 2 updates in the /test directory: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver).


Updates `k8s.io/api` from 0.34.3 to 0.34.4
- [Commits](kubernetes/api@v0.34.3...v0.34.4)

Updates `k8s.io/apimachinery` from 0.34.3 to 0.34.4
- [Commits](kubernetes/apimachinery@v0.34.3...v0.34.4)

Updates `k8s.io/client-go` from 0.34.3 to 0.34.4
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.3...v0.34.4)

Updates `k8s.io/component-base` from 0.34.3 to 0.34.4
- [Commits](kubernetes/component-base@v0.34.3...v0.34.4)

Updates `k8s.io/api` from 0.34.3 to 0.34.4
- [Commits](kubernetes/api@v0.34.3...v0.34.4)

Updates `k8s.io/apimachinery` from 0.34.3 to 0.34.4
- [Commits](kubernetes/apimachinery@v0.34.3...v0.34.4)

Updates `k8s.io/api` from 0.34.3 to 0.34.4
- [Commits](kubernetes/api@v0.34.3...v0.34.4)

Updates `k8s.io/apimachinery` from 0.34.3 to 0.34.4
- [Commits](kubernetes/apimachinery@v0.34.3...v0.34.4)

Updates `k8s.io/apiextensions-apiserver` from 0.34.3 to 0.34.4
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.3...v0.34.4)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/api
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/api
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/metal3-io/ironic-standalone-operator/api](https://github.com/metal3-io/ironic-standalone-operator) from 0.7.1 to 0.8.0.
- [Release notes](https://github.com/metal3-io/ironic-standalone-operator/releases)
- [Commits](metal3-io/ironic-standalone-operator@v0.7.1...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/metal3-io/ironic-standalone-operator/api
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/main/kubernetes-45f0de5cd5

🌱 Bump the kubernetes to v0.34.4
Bumps [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) from 3.6.7 to 3.6.8.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.7...v3.6.8)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/test/main/github.com/metal3-io/ironic-standalone-operator/api-0.8.0

🌱 Bump github.com/metal3-io/ironic-standalone-operator/api from 0.7.1 to 0.8.0 in /test
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.5 to 2.28.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.5...v2.28.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/metal3-io/ironic-standalone-operator/api](https://github.com/metal3-io/ironic-standalone-operator) from 0.7.1 to 0.8.0.
- [Release notes](https://github.com/metal3-io/ironic-standalone-operator/releases)
- [Commits](metal3-io/ironic-standalone-operator@v0.7.1...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/metal3-io/ironic-standalone-operator/api
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Kashif Khan <kashif.khan@est.tech>
* enabled containedctx

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>

* Add release 0.12 test triggers to README

Remove release 1.9 release triggers

Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>

* 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump github.com/gophercloud/gophercloud/v2

Bumps [github.com/gophercloud/gophercloud/v2](https://github.com/gophercloud/gophercloud) from 2.9.0 to 2.10.0.
- [Release notes](https://github.com/gophercloud/gophercloud/releases)
- [Changelog](https://github.com/gophercloud/gophercloud/blob/v2.10.0/CHANGELOG.md)
- [Commits](gophercloud/gophercloud@v2.9.0...v2.10.0)

---
updated-dependencies:
- dependency-name: github.com/gophercloud/gophercloud/v2
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in /test

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* E2E: Use UEFI

Switch e2e tests to UEFI instead of Legacy.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* Clean up sushy-tools config

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* E2E: Cleanup libvit DHCP config

Use Ironic dnsmasq container for DHCP.
This requires a workaround for now, since the keepalived image we use
doesn't support any other IP range than /32.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* 🌱 Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 in /test

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.3 to 2.27.4.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.3...v2.27.4)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Allow setting `force_persistent_boot_device: <value>` for `deploy_interface=direct` using env

Signed-off-by: Marcel Fest <marcel.fest@telekom.de>

* Log when cannot detach immediately

Otherwise, the users are left wondering why detachment does not work.

Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>

* Bump golang version to 1.24.12

Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>

* 🌱 Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in /test

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.46.0 to 0.47.0.
- [Commits](golang/crypto@v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in /hack/tools

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.46.0 to 0.47.0.
- [Commits](golang/crypto@v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.27.5 in /test

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.4 to 2.27.5.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.4...v2.27.5)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🚀 Release v0.11.4

Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>

* 🚀 Release v0.12.1

Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>

* Refactor: move HardwareDetails type to HardwareData

Both to prepare for v1beta1 and to reduce the size of the source file.

Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>

* E2E: Only override ironic image tags for e2e overlay

The image overrides make the version irrelevant. We say we want version
29.0, but then override the image to use the main tag. This doesn't make
sense. Instead, we only do that for the e2e overlay where we test the
latest versions together.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* E2E: Avoid BMO < 0.11 and Ironic > 30 together

Adjust the upgrade jobs to avoid broken combo when paired with
redfish-virtualmedia and UEFI.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* Fix deletion hang when aborting inspection during power-off

When deleting a BMH during inspection, power-off could hang because:

1. After abort, node is in InspectFail with TargetProvisionState still
   set, blocking power changes
2. Ironic does not auto-clear TargetProvisionState in InspectFail state
3. PowerOff() misinterpreted the abort message in LastError as a
   power-off failure

Fix by:
- Explicitly transitioning from InspectFail to manageable to clear
  TargetProvisionState and allow power changes
- Ignoring "aborted" errors in LastError during power-off

Signed-off-by: Riccardo Pittau <elfosardo@gmail.com>

* E2E: Cleanup old hardwaredata

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* E2E: Ensure CRDs when upgrade tests fail

We need to calculate the artifact folder outside of the test itself so
that if the test fails we can still collect the CRDs.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* E2E: Add pod and deployment descriptions

Collect kubectl describe for pods and deployments that are relevant in
the tests.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* HostClaim custom resources

Adds declarations for HostClaims and HostDeployPolicy custom resources.
Placeholder for a HostClaim controller. HostDeployPolicy are mostly
declarations guiding the selection process of the HostClaim controller.

Co-authored-by: Pierre Crégut <pierre.cregut@orange.com>
Co-authored-by: Laurent Roussarie <laurent.roussarie@orange.com>

Signed-off-by: Pierre Crégut <pierre.cregut@orange.com>

* 🌱 Bump github.com/metal3-io/ironic-standalone-operator/api

Bumps [github.com/metal3-io/ironic-standalone-operator/api](https://github.com/metal3-io/ironic-standalone-operator) from 0.7.0 to 0.7.1.
- [Release notes](https://github.com/metal3-io/ironic-standalone-operator/releases)
- [Commits](metal3-io/ironic-standalone-operator@v0.7.0...v0.7.1)

---
updated-dependencies:
- dependency-name: github.com/metal3-io/ironic-standalone-operator/api
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump sigs.k8s.io/controller-runtime in /apis

Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.22.4 to 0.22.5.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.4...v0.22.5)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update generated code

* fixed containedctx lint errors

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>

* fixed lint

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>

* 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in /test

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.38.3 to 1.39.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.3...v1.39.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* E2E: Use UEFI

Switch e2e tests to UEFI instead of Legacy.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* E2E: Cleanup libvit DHCP config

Use Ironic dnsmasq container for DHCP.
This requires a workaround for now, since the keepalived image we use
doesn't support any other IP range than /32.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

* fixed copliot comments

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>

* fixed issues with last rebase with main

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>

---------

Signed-off-by: Sandeep Kunusoth <sandeepkunsoth000@gmail.com>
Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Lennart Jern <lennart.jern@est.tech>
Signed-off-by: Marcel Fest <marcel.fest@telekom.de>
Signed-off-by: Dmitry Tantsur <dtantsur@protonmail.com>
Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>
Signed-off-by: Riccardo Pittau <elfosardo@gmail.com>
Signed-off-by: Pierre Crégut <pierre.cregut@orange.com>
Co-authored-by: Sunnatillo <sunnat.samadov@est.tech>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lennart Jern <lennart.jern@est.tech>
Co-authored-by: Marcel Fest <marcel.fest@telekom.de>
Co-authored-by: Dmitry Tantsur <dtantsur@protonmail.com>
Co-authored-by: smoshiur1237 <moshiur.rahman@est.tech>
Co-authored-by: Riccardo Pittau <elfosardo@gmail.com>
Co-authored-by: Pierre Crégut <pierre.cregut@orange.com>
…s/main/go.etcd.io/etcd/client/pkg/v3-3.6.8

🌱 Bump go.etcd.io/etcd/client/pkg/v3 from 3.6.7 to 3.6.8
dependabot bot and others added 20 commits March 2, 2026 09:10
Bumps the kubernetes group with 3 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/component-base](https://github.com/kubernetes/component-base).
Bumps the kubernetes group with 1 update in the /apis directory: [k8s.io/api](https://github.com/kubernetes/api).
Bumps the kubernetes group with 2 updates in the /test directory: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver).


Updates `k8s.io/api` from 0.34.4 to 0.34.5
- [Commits](kubernetes/api@v0.34.4...v0.34.5)

Updates `k8s.io/apimachinery` from 0.34.4 to 0.34.5
- [Commits](kubernetes/apimachinery@v0.34.4...v0.34.5)

Updates `k8s.io/client-go` from 0.34.4 to 0.34.5
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.4...v0.34.5)

Updates `k8s.io/component-base` from 0.34.4 to 0.34.5
- [Commits](kubernetes/component-base@v0.34.4...v0.34.5)

Updates `k8s.io/api` from 0.34.4 to 0.34.5
- [Commits](kubernetes/api@v0.34.4...v0.34.5)

Updates `k8s.io/apimachinery` from 0.34.4 to 0.34.5
- [Commits](kubernetes/apimachinery@v0.34.4...v0.34.5)

Updates `k8s.io/api` from 0.34.4 to 0.34.5
- [Commits](kubernetes/api@v0.34.4...v0.34.5)

Updates `k8s.io/apimachinery` from 0.34.4 to 0.34.5
- [Commits](kubernetes/apimachinery@v0.34.4...v0.34.5)

Updates `k8s.io/apiextensions-apiserver` from 0.34.4 to 0.34.5
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.4...v0.34.5)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/api
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/api
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/hack/tools/main/sigs.k8s.io/kustomize/api-0.21.1

🌱 Bump sigs.k8s.io/kustomize/api from 0.21.0 to 0.21.1 in /hack/tools
Bumps [sigs.k8s.io/kustomize/kustomize/v5](https://github.com/kubernetes-sigs/kustomize) from 5.8.0 to 5.8.1.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@kustomize/v5.8.0...kustomize/v5.8.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kustomize/v5
  dependency-version: 5.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
- Rename SECURITY_INSIGHTS.yml to .github/security-insights.yml
  to follow OSSF convention
- Update self-referencing URLs in the file to match new path
- Replace self-rolled CUE validation with
  revanite-io/security-insights-action, which auto-detects
  the schema version from the file
- Bump actions/checkout from v4.3.1 to v6.0.2

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
…s/hack/tools/main/sigs.k8s.io/kustomize/kustomize/v5-5.8.1

🌱 Bump sigs.k8s.io/kustomize/kustomize/v5 from 5.8.0 to 5.8.1 in /hack/tools
- Add test/vbmctl/README.md with usage, config, and architecture
- Add vbmctl CLI entrypoint (cmd/vbmctl/main.go) using cobra
- Add core API types (pkg/api/types.go) and unit tests
- Add config loader (pkg/config/config.go) and tests
- Add libvirt wrappers (pkg/libvirt/*) for VM, pool, volume management
- Add embedded XML templates for libvirt resources
- Add cobra dependency to test/go.mod
- Refactor legacy main.go for backward compatibility

This implements the core VM management functionality including DHCP IP
reservation for VMs. Network management, BMC emulator support, and image
server features are not included in this commit as they are still under
development.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>
…iner-tool

🌱 Parameterize container tool in Makefile
…emetry-sdk

🌱 Bump opentelemetry.io/otel/sdk to v1.40.0
…tions/main/github-actions-b1635afb78

🌱 Bump tj-actions/changed-files from 47.0.1 to 47.0.4 in the github-actions group
…sights

🌱 move security-insights.yml to .github/ and use upstream validator
Add persist-credentials: false to checkout actions, switch pr-verifier
from pull_request_target to pull_request, add explicit permissions to
workflows, bump actions to latest major versions, suppress accepted
findings, and apply zizmor safe fixes.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
Some of the container logs show "too many open files" errors. Increasing
the limits to avoid issues.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>
…ions

🌱 harden github actions workflows
…s/main/kubernetes-8ed7688e4f

🌱 Bump the kubernetes group to v0.34.5
Bumps [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) from 1.18.5 to 1.19.4.
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.5...v1.19.4)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
✨ Restructure VBMCTL into separate package and CLI
…s/test/main/github.com/cert-manager/cert-manager-1.19.4

🌱 Bump github.com/cert-manager/cert-manager from 1.18.5 to 1.19.4 in /test
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Mar 4, 2026
@openshift-ci-robot
Copy link

@honza: This pull request explicitly references no jira issue.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested review from dtantsur and zaneb March 4, 2026 13:45
@openshift-ci
Copy link

openshift-ci bot commented Mar 4, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: honza

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 4, 2026
@elfosardo
Copy link

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Mar 4, 2026
@openshift-ci
Copy link

openshift-ci bot commented Mar 4, 2026

@honza: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.