diff --git a/bundle/manifests/mongodb-atlas-kubernetes.clusterserviceversion.yaml b/bundle/manifests/mongodb-atlas-kubernetes.clusterserviceversion.yaml index a8677c701a..8126cc78c0 100644 --- a/bundle/manifests/mongodb-atlas-kubernetes.clusterserviceversion.yaml +++ b/bundle/manifests/mongodb-atlas-kubernetes.clusterserviceversion.yaml @@ -534,7 +534,7 @@ metadata: ] capabilities: Full Lifecycle categories: Database - createdAt: "2025-06-25T15:11:57Z" + createdAt: "2025-07-02T13:39:49Z" description: The MongoDB Atlas Kubernetes Operator enables easy management of Clusters in MongoDB Atlas features.operators.openshift.io/disconnected: "false" features.operators.openshift.io/fips-compliant: "false" @@ -547,12 +547,12 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/mongodb/mongodb-atlas-kubernetes support: support@mongodb.com - containerImage: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + containerImage: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 labels: operatorframework.io/arch.amd64: supported operatorframework.io/arch.arm64: supported operatorframework.io/os.linux: supported - name: mongodb-atlas-kubernetes.v2.9.0 + name: mongodb-atlas-kubernetes.v2.9.1 namespace: placeholder spec: apiservicedefinitions: {} @@ -720,6 +720,7 @@ spec: - atlasstreamconnections - atlasstreaminstances - atlasteams + - atlasthirdpartyintegrations verbs: - create - delete @@ -748,6 +749,7 @@ spec: - atlasstreamconnections/status - atlasstreaminstances/status - atlasteams/status + - atlasthirdpartyintegrations/status verbs: - get - patch @@ -758,6 +760,7 @@ spec: - atlasipaccesslists/finalizers - atlasnetworkcontainers/finalizers - atlasnetworkpeerings/finalizers + - atlasthirdpartyintegrations/finalizers verbs: - update serviceAccountName: mongodb-atlas-operator @@ -805,7 +808,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.annotations['olm.targetNamespaces'] - image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 imagePullPolicy: Always livenessProbe: httpGet: @@ -889,5 +892,5 @@ spec: maturity: beta provider: name: MongoDB, Inc - version: 2.9.0 - replaces: mongodb-atlas-kubernetes.v2.8.2 + version: 2.9.1 + replaces: mongodb-atlas-kubernetes.v2.9.0 diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml index 4933d98d7b..3fff207146 100644 --- a/config/manager/kustomization.yaml +++ b/config/manager/kustomization.yaml @@ -8,4 +8,4 @@ kind: Kustomization images: - name: controller newName: mongodb/mongodb-atlas-kubernetes-operator - newTag: 2.9.0 + newTag: 2.9.1 diff --git a/deploy/all-in-one.yaml b/deploy/all-in-one.yaml index 8d8a5aa939..a81f899ab6 100644 --- a/deploy/all-in-one.yaml +++ b/deploy/all-in-one.yaml @@ -6753,6 +6753,7 @@ rules: - atlasstreamconnections - atlasstreaminstances - atlasteams + - atlasthirdpartyintegrations verbs: - create - delete @@ -6781,6 +6782,7 @@ rules: - atlasstreamconnections/status - atlasstreaminstances/status - atlasteams/status + - atlasthirdpartyintegrations/status verbs: - get - patch @@ -6791,6 +6793,7 @@ rules: - atlasipaccesslists/finalizers - atlasnetworkcontainers/finalizers - atlasnetworkpeerings/finalizers + - atlasthirdpartyintegrations/finalizers verbs: - update --- @@ -6871,7 +6874,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 imagePullPolicy: Always livenessProbe: httpGet: diff --git a/deploy/clusterwide/clusterwide-config.yaml b/deploy/clusterwide/clusterwide-config.yaml index 5c24924a62..f02fdcccd8 100644 --- a/deploy/clusterwide/clusterwide-config.yaml +++ b/deploy/clusterwide/clusterwide-config.yaml @@ -107,6 +107,7 @@ rules: - atlasstreamconnections - atlasstreaminstances - atlasteams + - atlasthirdpartyintegrations verbs: - create - delete @@ -135,6 +136,7 @@ rules: - atlasstreamconnections/status - atlasstreaminstances/status - atlasteams/status + - atlasthirdpartyintegrations/status verbs: - get - patch @@ -145,6 +147,7 @@ rules: - atlasipaccesslists/finalizers - atlasnetworkcontainers/finalizers - atlasnetworkpeerings/finalizers + - atlasthirdpartyintegrations/finalizers verbs: - update --- @@ -225,7 +228,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 imagePullPolicy: Always livenessProbe: httpGet: diff --git a/deploy/namespaced/namespaced-config.yaml b/deploy/namespaced/namespaced-config.yaml index 0dd5f18c7b..82ca7411af 100644 --- a/deploy/namespaced/namespaced-config.yaml +++ b/deploy/namespaced/namespaced-config.yaml @@ -100,12 +100,14 @@ rules: - atlasdeployments - atlasfederatedauths - atlasipaccesslists + - atlasnetworkpeerings - atlasprivateendpoints - atlasprojects - atlassearchindexconfigs - atlasstreamconnections - atlasstreaminstances - atlasteams + - atlasthirdpartyintegrations verbs: - create - delete @@ -125,12 +127,14 @@ rules: - atlasdeployments/status - atlasfederatedauths/status - atlasipaccesslists/status + - atlasnetworkpeerings/status - atlasprivateendpoints/status - atlasprojects/status - atlassearchindexconfigs/status - atlasstreamconnections/status - atlasstreaminstances/status - atlasteams/status + - atlasthirdpartyintegrations/status verbs: - get - patch @@ -139,6 +143,8 @@ rules: - atlas.mongodb.com resources: - atlasipaccesslists/finalizers + - atlasnetworkpeerings/finalizers + - atlasthirdpartyintegrations/finalizers verbs: - update --- @@ -224,7 +230,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 imagePullPolicy: Always livenessProbe: httpGet: diff --git a/deploy/openshift/openshift.yaml b/deploy/openshift/openshift.yaml index 1f7c854369..9cbef80ee0 100644 --- a/deploy/openshift/openshift.yaml +++ b/deploy/openshift/openshift.yaml @@ -100,12 +100,14 @@ rules: - atlasdeployments - atlasfederatedauths - atlasipaccesslists + - atlasnetworkpeerings - atlasprivateendpoints - atlasprojects - atlassearchindexconfigs - atlasstreamconnections - atlasstreaminstances - atlasteams + - atlasthirdpartyintegrations verbs: - create - delete @@ -125,12 +127,14 @@ rules: - atlasdeployments/status - atlasfederatedauths/status - atlasipaccesslists/status + - atlasnetworkpeerings/status - atlasprivateendpoints/status - atlasprojects/status - atlassearchindexconfigs/status - atlasstreamconnections/status - atlasstreaminstances/status - atlasteams/status + - atlasthirdpartyintegrations/status verbs: - get - patch @@ -139,6 +143,8 @@ rules: - atlas.mongodb.com resources: - atlasipaccesslists/finalizers + - atlasnetworkpeerings/finalizers + - atlasthirdpartyintegrations/finalizers verbs: - update --- @@ -223,7 +229,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0 + image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1 imagePullPolicy: Always livenessProbe: httpGet: diff --git a/docs/releases/v2.9.1/sdlc-compliance.md b/docs/releases/v2.9.1/sdlc-compliance.md new file mode 100644 index 0000000000..41a0ec5049 --- /dev/null +++ b/docs/releases/v2.9.1/sdlc-compliance.md @@ -0,0 +1,45 @@ +SSDLC Compliance Report: Atlas Kubernetes Operator Manager v2.9.1 +================================================================= + +- Release Creators: igor.karpukhin@mongodb.com +- Created On: 2025-07-02 + +Overview: + +- **Product and Release Name** + + - Atlas Kubernetes Operator v2.9.1, 2025-07-02. + +- **Process Document** + - http://go/how-we-develop-software-doc + +- **Tool used to track third party vulnerabilities** + - [Kondukto](https://arcticglow.kondukto.io/) + +- **Dependency Information** + - See SBOMS Lite manifests (CycloneDX in JSON format) for `Intel` and `ARM` are to be found [here](.) + - See [instructions on how the SBOMs are generated or how to generate them manually](../../dev/image-sboms.md) + +- **Static Analysis Report** + - No SAST findings. Our CI system blocks merges on any SAST findings. + - No vulnerabilities were ignored for this release. + +- **Release Signature Report** + - Image signatures enforced by CI pipeline. + - See [Signature verification instructions here](../../dev/signed-images.md) + - Self-verification shortcut: + ```shell + make verify IMG=mongodb/mongodb-atlas-kubernetes-operator:2.9.1 SIGNATURE_REPO=mongodb/signatures + ``` + +- **Security Testing Report** + - Available as needed from Cloud Security. + +- **Security Assessment Report** + - Available as needed from Cloud Security. + +Assumptions and attestations: + +- Internal processes are used to ensure CVEs are identified and mitigated within SLAs. + +- All Operator images are signed by MongoDB, with signatures stored at `docker.io/mongodb/signatures`. diff --git a/helm-charts/atlas-operator-crds/Chart.yaml b/helm-charts/atlas-operator-crds/Chart.yaml index 2036679f65..dac0a588dd 100644 --- a/helm-charts/atlas-operator-crds/Chart.yaml +++ b/helm-charts/atlas-operator-crds/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: mongodb-atlas-operator-crds description: MongoDB Atlas Operator CRDs - Helm chart for installing and upgrading Custom Resource Definitions (CRDs) for the Atlas Operator. type: application -version: 2.9.0 -appVersion: 2.9.0 +version: 2.9.1 +appVersion: 2.9.1 kubeVersion: ">=1.15.0-0" keywords: - mongodb diff --git a/helm-charts/atlas-operator/Chart.yaml b/helm-charts/atlas-operator/Chart.yaml index bd293b0414..b002810db1 100644 --- a/helm-charts/atlas-operator/Chart.yaml +++ b/helm-charts/atlas-operator/Chart.yaml @@ -3,8 +3,8 @@ name: mongodb-atlas-operator description: |- MongoDB Atlas Operator - a Helm chart for installing and upgrading Atlas Operator: the official Kubernetes operator allowing to manage MongoDB Atlas resources from Kubernetes type: application -version: 2.9.0 -appVersion: 2.9.0 +version: 2.9.1 +appVersion: 2.9.1 kubeVersion: ">=1.15.0-0" keywords: - mongodb @@ -19,6 +19,6 @@ maintainers: email: support@mongodb.com dependencies: - name: mongodb-atlas-operator-crds - version: "2.9.0" + version: "2.9.1" repository: "file://../../helm-charts/atlas-operator-crds" condition: mongodb-atlas-operator-crds.enabled