Release v1.27.0 (#6284)

Signed-off-by: Catherine Chan-Tse <cchantse@redhat.com>

Author: oceanc80

Makefile

@@ -4,7 +4,7 @@ SHELL = /bin/bash
 # This value must be updated to the release tag of the most recent release, a change that must
 # occur in the release commit. IMAGE_VERSION will be removed once each subproject that uses this
 # version is moved to a separate repo and release process.
-export IMAGE_VERSION = v1.26.0
+export IMAGE_VERSION = v1.27.0
 # Build-time variables to inject into binaries
 export SIMPLE_VERSION = $(shell (test "$(shell git describe --tags)" = "$(shell git describe --tags --abbrev=0)" && echo $(shell git describe --tags)) || echo $(shell git describe --tags --abbrev=0)+git)
 export GIT_VERSION = $(shell git describe --dirty --tags --always)

changelog/fragments/01-validate-bugfix.yaml

@@ -0,0 +1,15 @@
+## v1.27.0
+
+### Changes
+
+- `operator-sdk run bundle(-upgrade)`: Change default of the `--security-context-config` flag to be `legacy` instead of `restricted`. ([#6210](https://github.com/operator-framework/operator-sdk/pull/6210))
+- `operator-sdk run bundle`: When creating the CatalogSource, we now set the `grpcPodConfig.SecurityContextConfig` to the value of the  `--security-context-config` flag. ([#6210](https://github.com/operator-framework/operator-sdk/pull/6210))
+- The `scorecard-test-kuttl` image always prints the kuttl logs in case there is an error processing the kuttl report. ([#6225](https://github.com/operator-framework/operator-sdk/pull/6225))
+
+### Bug Fixes
+
+- `operator-sdk bundle validate`: Fix a bug in the Kubernetes 1.25 validation logic that would warn that a Kubernetes resource was deprecated without checking the group that contains the resource.  (i.e if apps/deployments was deprecated and you used other/deployments you would recieve a warning)". The validation logic will now verify the group and resource before issuing a warning. ([#6227](https://github.com/operator-framework/operator-sdk/pull/6227))
+- `operator-sdk run bundle(-upgrade)`: Fix a bug where SQLite bundle images were failing to be run properly due to a change in the default channel that is used by `run bundle(-upgrade)` when creating a subscription. ([#6210](https://github.com/operator-framework/operator-sdk/pull/6210))
+- `operator-sdk run bundle(-upgrade)`: Update the logic used to set a Registry Pod's PSA configuration to fix a bug where a Pod's containers still had a restrictive SecurityContext even when setting `--security-context-config=legacy`. ([#6210](https://github.com/operator-framework/operator-sdk/pull/6210))
+- For `operator-sdk bundle validate`: Fix a bug that would make the command exit with a 0 exit code even if there were validation failures. ([#6274](https://github.com/operator-framework/operator-sdk/pull/6274))
+- (scorecard): Fixes a bug where an error would be thrown if a Custom Resource did not have a `.spec` field, which is a perfectly valid scenario.  Instead of throwing an error scorecard will now issue a suggestion. ([#6245](https://github.com/operator-framework/operator-sdk/pull/6245))

changelog/fragments/05-rbu-psa.yaml

@@ -1,4 +1,4 @@
-FROM quay.io/operator-framework/ansible-operator:v1.26.0
+FROM quay.io/operator-framework/ansible-operator:v1.27.0
 
 COPY requirements.yml ${HOME}/requirements.yml
 RUN ansible-galaxy collection install -r ${HOME}/requirements.yml \

changelog/fragments/6225-print-kuttl-logs.yaml

@@ -147,7 +147,7 @@ ifeq (,$(shell which ansible-operator 2>/dev/null))
 	@{ \
 	set -e ;\
 	mkdir -p $(dir $(ANSIBLE_OPERATOR)) ;\
-	curl -sSLo $(ANSIBLE_OPERATOR) https://github.com/operator-framework/operator-sdk/releases/download/v1.26.0/ansible-operator_$(OS)_$(ARCH) ;\
+	curl -sSLo $(ANSIBLE_OPERATOR) https://github.com/operator-framework/operator-sdk/releases/download/v1.27.0/ansible-operator_$(OS)_$(ARCH) ;\
 	chmod +x $(ANSIBLE_OPERATOR) ;\
 	}
 else

changelog/fragments/6247-bundle-validate-exit-code.yaml

@@ -8,7 +8,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - basic-check-spec
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: basic
       test: basic-check-spec-test
@@ -18,7 +18,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-bundle-validation
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: olm
       test: olm-bundle-validation-test
@@ -28,7 +28,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-crds-have-validation
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: olm
       test: olm-crds-have-validation-test
@@ -38,7 +38,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-crds-have-resources
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: olm
       test: olm-crds-have-resources-test
@@ -48,7 +48,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-spec-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: olm
       test: olm-spec-descriptors-test
@@ -58,7 +58,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-status-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.26.0
+    image: quay.io/operator-framework/scorecard-test:v1.27.0
     labels:
       suite: olm
       test: olm-status-descriptors-test