OPRUN-3961: Synchronize From Upstream Repositories

.tilt-support

@@ -67,6 +67,7 @@ COPY {} /
         live_update=[
             sync('.tiltbuild/bin/{}'.format(binary_name), '/{}'.format(binary_name)),
         ],
+        restart_file="/.tilt_restart_proc",
         # The command to run in the container.
         entrypoint=entrypoint,
     )

commitchecker.yaml

@@ -1,4 +1,4 @@
-expectedMergeBase: 15db50682d56e977aa1cb714003dc21517ea09b7
+expectedMergeBase: 44de6f2e03c2f02845c9d7362ade607a0b0c501d
 upstreamBranch: main
 upstreamOrg: operator-framework
 upstreamRepo: operator-controller

config/base/catalogd/manager/manager.yaml

@@ -52,8 +52,11 @@ spec:
         volumeMounts:
             - name: cache
               mountPath: /var/cache/
+            - name: tmp
+              mountPath: /tmp
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           capabilities:
             drop:
               - ALL
@@ -80,3 +83,5 @@ spec:
       volumes:
         - name: cache
           emptyDir: {}
+        - name: tmp
+          emptyDir: {}

config/base/operator-controller/manager/manager.yaml

@@ -52,8 +52,11 @@ spec:
         volumeMounts:
           - name: cache
             mountPath: /var/cache
+          - name: tmp
+            mountPath: /tmp
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           capabilities:
             drop:
               - "ALL"
@@ -69,8 +72,6 @@ spec:
             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10
-        # TODO(user): Configure the resources accordingly based on the project requirements.
-        # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
         resources:
           requests:
             cpu: 10m
@@ -81,3 +82,5 @@ spec:
       volumes:
         - name: cache
           emptyDir: {}
+        - name: tmp
+          emptyDir: { }

go.mod

@@ -25,7 +25,7 @@ require (
 	github.com/spf13/cobra v1.9.1
 	github.com/stretchr/testify v1.10.0
 	golang.org/x/exp v0.0.0-20250228200357-dead58393ab7
-	golang.org/x/mod v0.24.0
+	golang.org/x/mod v0.25.0
 	golang.org/x/sync v0.15.0
 	golang.org/x/tools v0.33.0
 	gopkg.in/yaml.v2 v2.4.0

go.sum

@@ -620,8 +620,8 @@ golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
-golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
+golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w=
+golang.org/x/mod v0.25.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=

openshift/catalogd/manifests/16-deployment-openshift-catalogd-catalogd-controller-manager.yml

@@ -77,10 +77,13 @@ spec:
             capabilities:
               drop:
                 - ALL
+            readOnlyRootFilesystem: true
           terminationMessagePolicy: FallbackToLogsOnError
           volumeMounts:
             - mountPath: /var/cache/
               name: cache
+            - mountPath: /tmp
+              name: tmp
             - mountPath: /var/certs
               name: catalogserver-certs
             - mountPath: /var/ca-certs
@@ -118,6 +121,8 @@ spec:
       volumes:
         - emptyDir: {}
           name: cache
+        - emptyDir: {}
+          name: tmp
         - name: catalogserver-certs
           secret:
             items:

openshift/operator-controller/manifests/20-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

@@ -77,10 +77,13 @@ spec:
             capabilities:
               drop:
                 - ALL
+            readOnlyRootFilesystem: true
           terminationMessagePolicy: FallbackToLogsOnError
           volumeMounts:
             - mountPath: /var/cache
               name: cache
+            - mountPath: /tmp
+              name: tmp
             - mountPath: /var/certs
               name: operator-controller-certs
             - mountPath: /var/ca-certs
@@ -118,6 +121,8 @@ spec:
       volumes:
         - emptyDir: {}
           name: cache
+        - emptyDir: {}
+          name: tmp
         - name: operator-controller-certs
           secret:
             items: