Release 2.9.1

bundle/manifests/mongodb-atlas-kubernetes.clusterserviceversion.yaml

@@ -534,7 +534,7 @@ metadata:
       ]
     capabilities: Full Lifecycle
     categories: Database
-    createdAt: "2025-06-25T15:11:57Z"
+    createdAt: "2025-07-02T13:39:49Z"
     description: The MongoDB Atlas Kubernetes Operator enables easy management of Clusters in MongoDB Atlas
     features.operators.openshift.io/disconnected: "false"
     features.operators.openshift.io/fips-compliant: "false"
@@ -547,12 +547,12 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
     repository: https://github.com/mongodb/mongodb-atlas-kubernetes
     support: support@mongodb.com
-    containerImage: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+    containerImage: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
   labels:
     operatorframework.io/arch.amd64: supported
     operatorframework.io/arch.arm64: supported
     operatorframework.io/os.linux: supported
-  name: mongodb-atlas-kubernetes.v2.9.0
+  name: mongodb-atlas-kubernetes.v2.9.1
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -720,6 +720,7 @@ spec:
                 - atlasstreamconnections
                 - atlasstreaminstances
                 - atlasteams
+                - atlasthirdpartyintegrations
               verbs:
                 - create
                 - delete
@@ -748,6 +749,7 @@ spec:
                 - atlasstreamconnections/status
                 - atlasstreaminstances/status
                 - atlasteams/status
+                - atlasthirdpartyintegrations/status
               verbs:
                 - get
                 - patch
@@ -758,6 +760,7 @@ spec:
                 - atlasipaccesslists/finalizers
                 - atlasnetworkcontainers/finalizers
                 - atlasnetworkpeerings/finalizers
+                - atlasthirdpartyintegrations/finalizers
               verbs:
                 - update
           serviceAccountName: mongodb-atlas-operator
@@ -805,7 +808,7 @@ spec:
                         valueFrom:
                           fieldRef:
                             fieldPath: metadata.annotations['olm.targetNamespaces']
-                    image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+                    image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
                     imagePullPolicy: Always
                     livenessProbe:
                       httpGet:
@@ -889,5 +892,5 @@ spec:
   maturity: beta
   provider:
     name: MongoDB, Inc
-  version: 2.9.0
-  replaces: mongodb-atlas-kubernetes.v2.8.2
+  version: 2.9.1
+  replaces: mongodb-atlas-kubernetes.v2.9.0

config/manager/kustomization.yaml

@@ -8,4 +8,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: mongodb/mongodb-atlas-kubernetes-operator
-  newTag: 2.9.0
+  newTag: 2.9.1

deploy/all-in-one.yaml

@@ -6753,6 +6753,7 @@ rules:
   - atlasstreamconnections
   - atlasstreaminstances
   - atlasteams
+  - atlasthirdpartyintegrations
   verbs:
   - create
   - delete
@@ -6781,6 +6782,7 @@ rules:
   - atlasstreamconnections/status
   - atlasstreaminstances/status
   - atlasteams/status
+  - atlasthirdpartyintegrations/status
   verbs:
   - get
   - patch
@@ -6791,6 +6793,7 @@ rules:
   - atlasipaccesslists/finalizers
   - atlasnetworkcontainers/finalizers
   - atlasnetworkpeerings/finalizers
+  - atlasthirdpartyintegrations/finalizers
   verbs:
   - update
 ---
@@ -6871,7 +6874,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

deploy/clusterwide/clusterwide-config.yaml

@@ -107,6 +107,7 @@ rules:
   - atlasstreamconnections
   - atlasstreaminstances
   - atlasteams
+  - atlasthirdpartyintegrations
   verbs:
   - create
   - delete
@@ -135,6 +136,7 @@ rules:
   - atlasstreamconnections/status
   - atlasstreaminstances/status
   - atlasteams/status
+  - atlasthirdpartyintegrations/status
   verbs:
   - get
   - patch
@@ -145,6 +147,7 @@ rules:
   - atlasipaccesslists/finalizers
   - atlasnetworkcontainers/finalizers
   - atlasnetworkpeerings/finalizers
+  - atlasthirdpartyintegrations/finalizers
   verbs:
   - update
 ---
@@ -225,7 +228,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

deploy/namespaced/namespaced-config.yaml

@@ -100,12 +100,14 @@ rules:
   - atlasdeployments
   - atlasfederatedauths
   - atlasipaccesslists
+  - atlasnetworkpeerings
   - atlasprivateendpoints
   - atlasprojects
   - atlassearchindexconfigs
   - atlasstreamconnections
   - atlasstreaminstances
   - atlasteams
+  - atlasthirdpartyintegrations
   verbs:
   - create
   - delete
@@ -125,12 +127,14 @@ rules:
   - atlasdeployments/status
   - atlasfederatedauths/status
   - atlasipaccesslists/status
+  - atlasnetworkpeerings/status
   - atlasprivateendpoints/status
   - atlasprojects/status
   - atlassearchindexconfigs/status
   - atlasstreamconnections/status
   - atlasstreaminstances/status
   - atlasteams/status
+  - atlasthirdpartyintegrations/status
   verbs:
   - get
   - patch
@@ -139,6 +143,8 @@ rules:
   - atlas.mongodb.com
   resources:
   - atlasipaccesslists/finalizers
+  - atlasnetworkpeerings/finalizers
+  - atlasthirdpartyintegrations/finalizers
   verbs:
   - update
 ---
@@ -224,7 +230,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

deploy/openshift/openshift.yaml

@@ -100,12 +100,14 @@ rules:
   - atlasdeployments
   - atlasfederatedauths
   - atlasipaccesslists
+  - atlasnetworkpeerings
   - atlasprivateendpoints
   - atlasprojects
   - atlassearchindexconfigs
   - atlasstreamconnections
   - atlasstreaminstances
   - atlasteams
+  - atlasthirdpartyintegrations
   verbs:
   - create
   - delete
@@ -125,12 +127,14 @@ rules:
   - atlasdeployments/status
   - atlasfederatedauths/status
   - atlasipaccesslists/status
+  - atlasnetworkpeerings/status
   - atlasprivateendpoints/status
   - atlasprojects/status
   - atlassearchindexconfigs/status
   - atlasstreamconnections/status
   - atlasstreaminstances/status
   - atlasteams/status
+  - atlasthirdpartyintegrations/status
   verbs:
   - get
   - patch
@@ -139,6 +143,8 @@ rules:
   - atlas.mongodb.com
   resources:
   - atlasipaccesslists/finalizers
+  - atlasnetworkpeerings/finalizers
+  - atlasthirdpartyintegrations/finalizers
   verbs:
   - update
 ---
@@ -223,7 +229,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.0
+        image: mongodb/mongodb-atlas-kubernetes-operator:2.9.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

docs/releases/v2.9.1/sdlc-compliance.md

@@ -0,0 +1,45 @@
+SSDLC Compliance Report: Atlas Kubernetes Operator Manager v2.9.1
+=================================================================
+
+- Release Creators: igor.karpukhin@mongodb.com
+- Created On:       2025-07-02
+
+Overview:
+
+- **Product and Release Name**
+
+    - Atlas Kubernetes Operator v2.9.1, 2025-07-02.
+
+- **Process Document**
+  - http://go/how-we-develop-software-doc
+
+- **Tool used to track third party vulnerabilities**
+  - [Kondukto](https://arcticglow.kondukto.io/)
+
+- **Dependency Information**
+  - See SBOMS Lite manifests (CycloneDX in JSON format) for `Intel` and `ARM` are to be found [here](.)
+  - See [instructions on how the SBOMs are generated or how to generate them manually](../../dev/image-sboms.md)
+
+- **Static Analysis Report**
+  - No SAST findings. Our CI system blocks merges on any SAST findings.
+  - No vulnerabilities were ignored for this release.
+
+- **Release Signature Report**
+  - Image signatures enforced by CI pipeline.
+  - See [Signature verification instructions here](../../dev/signed-images.md)
+  - Self-verification shortcut:
+    ```shell
+    make verify IMG=mongodb/mongodb-atlas-kubernetes-operator:2.9.1 SIGNATURE_REPO=mongodb/signatures
+    ```
+
+- **Security Testing Report**
+  - Available as needed from Cloud Security.
+
+- **Security Assessment Report**
+  - Available as needed from Cloud Security.
+
+Assumptions and attestations:
+
+- Internal processes are used to ensure CVEs are identified and mitigated within SLAs.
+
+- All Operator images are signed by MongoDB, with signatures stored at `docker.io/mongodb/signatures`.

helm-charts/atlas-operator-crds/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: mongodb-atlas-operator-crds
 description: MongoDB Atlas Operator CRDs - Helm chart for installing and upgrading Custom Resource Definitions (CRDs) for the Atlas Operator.
 type: application
-version: 2.9.0
-appVersion: 2.9.0
+version: 2.9.1
+appVersion: 2.9.1
 kubeVersion: ">=1.15.0-0"
 keywords:
   - mongodb

helm-charts/atlas-operator/Chart.yaml

@@ -3,8 +3,8 @@ name: mongodb-atlas-operator
 description: |-
   MongoDB Atlas Operator - a Helm chart for installing and upgrading Atlas Operator: the official Kubernetes operator allowing to manage MongoDB Atlas resources from Kubernetes
 type: application
-version: 2.9.0
-appVersion: 2.9.0
+version: 2.9.1
+appVersion: 2.9.1
 kubeVersion: ">=1.15.0-0"
 keywords:
   - mongodb
@@ -19,6 +19,6 @@ maintainers:
     email: support@mongodb.com
 dependencies:
   - name: mongodb-atlas-operator-crds
-    version: "2.9.0"
+    version: "2.9.1"
     repository:  "file://../../helm-charts/atlas-operator-crds"
     condition: mongodb-atlas-operator-crds.enabled