Skip to content

fix: add batch/jobs RBAC to spod ClusterRole and restore clone syscall#183

Merged
Vincent056 merged 2 commits intoopenshift:release-0.10from
Vincent056:update-image-shas-release-0.10
Feb 9, 2026
Merged

fix: add batch/jobs RBAC to spod ClusterRole and restore clone syscall#183
Vincent056 merged 2 commits intoopenshift:release-0.10from
Vincent056:update-image-shas-release-0.10

Conversation

@Vincent056
Copy link

Generate correct bundle

What type of PR is this?

/kind cleanup

What this PR does / why we need it:

Which issue(s) this PR fixes:

None

Does this PR have test?

N/A.

Special notes for your reviewer:

Does this PR introduce a user-facing change?

None

Add missing batch/jobs permissions to the bundle ClusterRole for the spod
service account, required by the SELinux policy reload job.

Restore the clone syscall to seccomp profiles alongside clone3 for
broader compatibility.
@openshift-ci openshift-ci bot added the kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. label Feb 9, 2026
@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 9, 2026
@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/lgtm

@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/label qe-approved

@openshift-ci openshift-ci bot added the qe-approved Signifies that QE has signed off on this PR label Feb 9, 2026
@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Feb 9, 2026
@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/lgtm cancel

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Feb 9, 2026
@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/remove-label qe-approved

@openshift-ci openshift-ci bot removed the qe-approved Signifies that QE has signed off on this PR label Feb 9, 2026
@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

Verification pass:

$ oc get selinuxprofiles.security-profiles-operator.x-k8s.io 
NAME          USAGE                 STATE
errorlogger   errorlogger.process   Installed
$ oc get rawselinuxprofiles
NAME              USAGE                     STATE
test-reload-raw   test-reload-raw.process   Installed

@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/lgtm

@xiaojiey
Copy link

xiaojiey commented Feb 9, 2026

/label qe-approved

@openshift-ci openshift-ci bot added qe-approved Signifies that QE has signed off on this PR lgtm Indicates that a PR is ready to be merged. labels Feb 9, 2026
Copy link

@yuumasato yuumasato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

"sigaltstack",
"socket",
"stat",
"statx",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

statx is duplicate here.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this has being fixed in the following commit

@openshift-ci
Copy link

openshift-ci bot commented Feb 9, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Vincent056, yuumasato

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:
  • OWNERS [Vincent056,yuumasato]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Feb 9, 2026
@openshift-ci
Copy link

openshift-ci bot commented Feb 9, 2026

New changes are detected. LGTM label has been removed.

@Vincent056 Vincent056 merged commit 454f2ce into openshift:release-0.10 Feb 9, 2026
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. qe-approved Signifies that QE has signed off on this PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants