Bump to v0.9.1

saschagrunert · k8s-ci-robot · commit f463f98748a3 · 2025-04-09T05:40:41.000-07:00
Signed-off-by: Sascha Grunert &lt;sgrunert@redhat.com&gt;
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-0.9.1-dev
+0.9.1
diff --git a/bundle/manifests/security-profiles-operator-profile_v1_configmap.yaml b/bundle/manifests/security-profiles-operator-profile_v1_configmap.yaml
@@ -3,11 +3,33 @@ data:
   bpf-recorder.json: |
     {
       "defaultAction": "SCMP_ACT_ERRNO",
-      "architectures": [
-        "SCMP_ARCH_X86_64",
-        "SCMP_ARCH_X86",
-        "SCMP_ARCH_X32",
-        "SCMP_ARCH_AARCH64"
+      "archMap": [
+        {
+          "architecture": "SCMP_ARCH_X86_64",
+          "subArchitectures": [
+            "SCMP_ARCH_X86",
+            "SCMP_ARCH_X32"
+          ]
+        },
+        {
+          "architecture": "SCMP_ARCH_AARCH64",
+          "subArchitectures": [
+            "SCMP_ARCH_ARM"
+          ]
+        },
+        {
+          "architecture": "SCMP_ARCH_PPC64LE",
+          "subArchitectures": [
+            "SCMP_ARCH_PPC64",
+            "SCMP_ARCH_PPC"
+          ]
+        },
+        {
+          "architecture": "SCMP_ARCH_S390X",
+          "subArchitectures": [
+            "SCMP_ARCH_S390"
+          ]
+        }
       ],
       "syscalls": [
         {
@@ -81,6 +103,7 @@ data:
             "setuid",
             "sigaltstack",
             "socket",
+            "stat",
             "statfs",
             "tgkill",
             "uname",
@@ -134,55 +157,34 @@ data:
   security-profiles-operator.json: |
     {
       "defaultAction": "SCMP_ACT_ERRNO",
-      "archMap": [
-        {
-          "architecture": "SCMP_ARCH_X86_64",
-          "subArchitectures": [
-            "SCMP_ARCH_X86",
-            "SCMP_ARCH_X32"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_AARCH64",
-          "subArchitectures": [
-            "SCMP_ARCH_ARM"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_MIPS64",
-          "subArchitectures": [
-            "SCMP_ARCH_MIPS",
-            "SCMP_ARCH_MIPS64N32"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_MIPS64N32",
-          "subArchitectures": [
-            "SCMP_ARCH_MIPS",
-            "SCMP_ARCH_MIPS64"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_MIPSEL64",
-          "subArchitectures": [
-            "SCMP_ARCH_MIPSEL",
-            "SCMP_ARCH_MIPSEL64N32"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_MIPSEL64N32",
-          "subArchitectures": [
-            "SCMP_ARCH_MIPSEL",
-            "SCMP_ARCH_MIPSEL64"
-          ]
-        },
-        {
-          "architecture": "SCMP_ARCH_S390X",
-          "subArchitectures": [
-            "SCMP_ARCH_S390"
-          ]
-        }
-      ],
+        "archMap": [
+            {
+                "architecture": "SCMP_ARCH_X86_64",
+                "subArchitectures": [
+                    "SCMP_ARCH_X86",
+                    "SCMP_ARCH_X32"
+                ]
+            },
+            {
+                "architecture": "SCMP_ARCH_AARCH64",
+                "subArchitectures": [
+                    "SCMP_ARCH_ARM"
+                ]
+            },
+            {
+            "architecture": "SCMP_ARCH_PPC64LE",
+                "subArchitectures": [
+                    "SCMP_ARCH_PPC64",
+                    "SCMP_ARCH_PPC"
+                ]
+            },
+            {
+                "architecture": "SCMP_ARCH_S390X",
+                "subArchitectures": [
+                    "SCMP_ARCH_S390"
+                ]
+            }
+        ],
       "syscalls": [
         {
           "names": [
@@ -344,7 +346,7 @@ data:
         executable:
           allowedExecutables:
           - /security-profiles-operator
-          - /sbin/apparmor_parser
+          - /usr/sbin/apparmor_parser
         filesystem:
           readOnlyPaths:
           - /  # workaround for apparmor bug
diff --git a/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml b/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
@@ -247,16 +247,17 @@ metadata:
       ]
     capabilities: Basic Install
     categories: Security
-    containerImage: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.0
-    createdAt: "2025-02-25T13:34:54Z"
-    olm.skipRange: '>=0.4.1 <0.9.1-dev'
+    containerImage: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
+    createdAt: "2025-04-09T08:07:05Z"
+    olm.skipRange: '>=0.4.1 <0.9.1'
     operatorframework.io/cluster-monitoring: "true"
+    operatorframework.io/os.linux: supported
     operatorframework.io/suggested-namespace: security-profiles-operator
     operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine", "OpenShift
       Container Platform", "OpenShift Platform Plus"]'
     operators.operatorframework.io/builder: operator-sdk-v1.37.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
-  name: security-profiles-operator.v0.9.1-dev
+  name: security-profiles-operator.v0.9.1
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -697,7 +698,7 @@ spec:
                       fieldPath: spec.nodeName
                 - name: KUBELET_DIR
                   value: /var/lib/kubelet
-                image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+                image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
                 imagePullPolicy: Always
                 name: security-profiles-operator
                 resources:
@@ -809,4 +810,4 @@ spec:
   - image: quay.io/security-profiles-operator/selinuxd-fedora:latest
     name: selinuxd-fedora
   replaces: security-profiles-operator.v0.8.4
-  version: 0.9.1-dev
+  version: 0.9.1
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_apparmorprofiles.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_apparmorprofiles.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_profilebindings.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_profilebindings.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_profilerecordings.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_profilerecordings.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_rawselinuxprofiles.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_rawselinuxprofiles.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_seccompprofiles.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_seccompprofiles.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_securityprofilenodestatuses.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_securityprofilenodestatuses.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_securityprofilesoperatordaemons.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_securityprofilesoperatordaemons.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/bundle/manifests/security-profiles-operator.x-k8s.io_selinuxprofiles.yaml b/bundle/manifests/security-profiles-operator.x-k8s.io_selinuxprofiles.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.2
+    controller-gen.kubebuilder.io/version: v0.17.3
   creationTimestamp: null
   labels:
     app: security-profiles-operator
diff --git a/dependencies.yaml b/dependencies.yaml
@@ -150,7 +150,7 @@ dependencies:
       match: BOM_VERSION
 
   - name: spo-current
-    version: 0.9.1-dev
+    version: 0.9.1
     refPaths:
     - path: VERSION
       match: ^.*
diff --git a/deploy/base/clusterserviceversion.yaml b/deploy/base/clusterserviceversion.yaml
@@ -6,7 +6,7 @@ metadata:
     alm-examples: '[]'
     capabilities: Basic Install
     categories: Security
-    containerImage: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.0
+    containerImage: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
     olm.skipRange: '>=0.4.1 <0.8.5-dev'
     operatorframework.io/suggested-namespace: security-profiles-operator
     operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine", "OpenShift Container Platform", "OpenShift Platform Plus"]'
diff --git a/deploy/catalog-preamble.json b/deploy/catalog-preamble.json
@@ -13,8 +13,8 @@
     "package": "security-profiles-operator",
     "entries": [
         {
-            "name": "security-profiles-operator.v0.9.1-dev",
-            "skipRange": ">=0.4.1 <0.9.1-dev"
+            "name": "security-profiles-operator.v0.9.1",
+            "skipRange": ">=0.4.1 <0.9.1"
         }
     ]
 }
diff --git a/deploy/helm/Chart.yaml b/deploy/helm/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: security-profiles-operator
 description: "The Kubernetes Security Profiles Operator."
 type: application
-version: "0.9.1-dev"
-appVersion: "0.9.1-dev"
+version: "0.9.1"
+appVersion: "0.9.1"
diff --git a/deploy/kustomize-deployment/kustomization.yaml b/deploy/kustomize-deployment/kustomization.yaml
@@ -6,11 +6,11 @@ sortOptions:
 
 images:
 - name: security-profiles-operator
-  newName: gcr.io/k8s-staging-sp-operator/security-profiles-operator
-  newTag: latest
+  # # newName: gcr.io/k8s-staging-sp-operator/security-profiles-operator
+  # # newTag: latest
   # For images to be released:
-  # newName: registry.k8s.io/security-profiles-operator/security-profiles-operator
-  # newTag: v0.9.1
+  newName: registry.k8s.io/security-profiles-operator/security-profiles-operator
+  newTag: v0.9.1
 
 
 resources:
diff --git a/deploy/namespace-operator.yaml b/deploy/namespace-operator.yaml
@@ -3397,7 +3397,7 @@ spec:
               fieldPath: spec.nodeName
         - name: KUBELET_DIR
           value: /var/lib/kubelet
-        image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
         imagePullPolicy: Always
         name: security-profiles-operator
         resources:
diff --git a/deploy/openshift-dev.yaml b/deploy/openshift-dev.yaml
@@ -3388,7 +3388,7 @@ spec:
               fieldPath: spec.nodeName
         - name: KUBELET_DIR
           value: /var/lib/kubelet
-        image: image-registry.openshift-image-registry.svc:5000/openshift/security-profiles-operator:latest
+        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
         imagePullPolicy: Always
         name: security-profiles-operator
         resources:
diff --git a/deploy/openshift-downstream.yaml b/deploy/openshift-downstream.yaml
@@ -3408,7 +3408,7 @@ spec:
               fieldPath: spec.nodeName
         - name: KUBELET_DIR
           value: /var/lib/kubelet
-        image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
         imagePullPolicy: Always
         name: security-profiles-operator
         resources:
diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -3395,7 +3395,7 @@ spec:
               fieldPath: spec.nodeName
         - name: KUBELET_DIR
           value: /var/lib/kubelet
-        image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
         imagePullPolicy: Always
         name: security-profiles-operator
         resources:
diff --git a/deploy/webhook-operator.yaml b/deploy/webhook-operator.yaml
@@ -3395,7 +3395,7 @@ spec:
               fieldPath: spec.nodeName
         - name: KUBELET_DIR
           value: /var/lib/kubelet
-        image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
         imagePullPolicy: Always
         name: security-profiles-operator
         resources:
diff --git a/examples/olm/install-resources.yaml b/examples/olm/install-resources.yaml
@@ -17,7 +17,7 @@ metadata:
   namespace: olm
 spec:
   sourceType: grpc
-  image: gcr.io/k8s-staging-sp-operator/security-profiles-operator-catalog:latest
+  image: registry.k8s.io/security-profiles-operator/security-profiles-operator-catalog:v0.9.1
 ---
 apiVersion: operators.coreos.com/v1alpha1
 kind: Subscription
diff --git a/hack/ci/e2e-olm.sh b/hack/ci/e2e-olm.sh
@@ -43,7 +43,7 @@ function build_and_push_packages() {
 
   # Create a manifest with local image
   cp deploy/operator.yaml ${OPERATOR_MANIFEST}
-  sed -i "s#gcr.io/k8s-staging-sp-operator/security-profiles-operator.*\$#${IMG}#" ${OPERATOR_MANIFEST}
+  sed -i "s#registry.k8s.io/security-profiles-operator.*\$#${IMG}#" ${OPERATOR_MANIFEST}
   grep ${IMG} ${OPERATOR_MANIFEST} || exit 1
 
   # this is a kludge, we need to make sure kustomize can be overwritten
@@ -71,7 +71,7 @@ function deploy_deps() {
   kubectl_wait -ncert-manager --for condition=ready pod -l app.kubernetes.io/instance=cert-manager
 
   # All installation methods run off the same catalog
-  sed -i "s#gcr.io/k8s-staging-sp-operator/security-profiles-operator-catalog:latest#${CATALOG_IMG}#g" examples/olm/install-resources.yaml
+  sed -i "s#registry.k8s.io/security-profiles-operator/security-profiles-operator-catalog:v0.9.1#${CATALOG_IMG}#g" examples/olm/install-resources.yaml
 
 }
 
diff --git a/hack/deploy-localhost.patch b/hack/deploy-localhost.patch
@@ -15,7 +15,7 @@ index d7bf1964..d2a9c614 100644
                fieldPath: spec.nodeName
          - name: KUBELET_DIR
            value: /var/lib/kubelet
--        image: gcr.io/k8s-staging-sp-operator/security-profiles-operator:latest
+-        image: registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.9.1
 -        imagePullPolicy: Always
 +        image: localhost/security-profiles-operator:latest
 +        imagePullPolicy: IfNotPresent
diff --git a/test/e2e_test.go b/test/e2e_test.go
@@ -313,8 +313,8 @@ func (e *e2e) deployOperator(manifest string) {
 	// ones from the nodes
 	e.logf("Setting imagePullPolicy to '%s' in manifest: %s", e.pullPolicy, manifest)
 	e.updateManifest(manifest, "imagePullPolicy: Always", "imagePullPolicy: "+e.pullPolicy)
-	e.updateManifest(manifest, "image: .*gcr.io/k8s-staging-sp-operator/.*", "image: "+e.testImage)
-	e.updateManifest(manifest, "value: .*gcr.io/k8s-staging-sp-operator/.*", "value: "+e.testImage)
+	e.updateManifest(manifest, "image: .*registry.k8s.io/.*", "image: "+e.testImage)
+	e.updateManifest(manifest, "value: .*registry.k8s.io/.*", "value: "+e.testImage)
 
 	if e.selinuxEnabled {
 		e.updateManifest(manifest, "enableSelinux: false", "enableSelinux: true")
