From 8a356686519f10cbd89adeb65836ae37dd2594df Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Wed, 2 Sep 2026 03:31:06 +0000 Subject: [PATCH] chore: bump sandboxed-containers-operator to v1.13.1 Bumps the pinned OSC operator CSV from v1.13.0 to v1.13.1 in every topology values file: values-azure.yaml, values-baremetal.yaml, values-baremetal-hub.yaml, values-baremetal-spoke.yaml: v1.13.0 -> v1.13.1 values-azure-spoke.yaml was independently pinned to v1.12.0 (not 1.13.0 like every other topology) -- spoke should always track primary, so this also moves it to v1.13.1 directly, reconciling the drift rather than just bumping it in place. Also bumps airgap/imageset-config-4.22.yaml's sandboxed-containers-operator minVersion/maxVersion to "1.13.1" so the airgap oc-mirror bundle pin stays in sync with the values-file pin -- otherwise the airgap mirror would only ever carry 1.13.0 and the pin above would be unsatisfiable in that topology. Depends on #142 (align refval collection with the pinned OSC version) for correct reference-value collection against this new pin -- without it, `make collect-azure-refvals` would need an explicit --osc-version override to avoid drifting to `latest` again. Note: sandboxed-containers-operator 1.13.1's companion osc-dm-verity-image was confirmed to exist and verify successfully (cosign) against registry.redhat.io. The operator bundle's presence in the redhat-operator-index:v4.22 catalog channel (relevant to the imageset-config-4.22.yaml change specifically) was not independently confirmed -- tooling available (skopeo, oc-mirror) either enumerated the full multi-thousand-tag catalog index or hit registry auth issues unrelated to the pull secret's validity. Please verify catalog channel availability before running an airgap mirror against this pin. Operational follow-up (not done here): after this merges, re-run `make collect-azure-refvals` / `make collect-firmware-refvals` and `make load-secrets` against the new pin on any existing deployment, since the reference-value hashes tied to 1.13.0 no longer match a 1.13.1 install. --- airgap/imageset-config-4.22.yaml | 4 ++-- values-azure-spoke.yaml | 2 +- values-azure.yaml | 2 +- values-baremetal-hub.yaml | 2 +- values-baremetal-spoke.yaml | 2 +- values-baremetal.yaml | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/airgap/imageset-config-4.22.yaml b/airgap/imageset-config-4.22.yaml index 9065b06e..f46ffcd0 100644 --- a/airgap/imageset-config-4.22.yaml +++ b/airgap/imageset-config-4.22.yaml @@ -31,8 +31,8 @@ mirror: - name: sandboxed-containers-operator channels: - name: stable - minVersion: "1.13.0" - maxVersion: "1.13.0" + minVersion: "1.13.1" + maxVersion: "1.13.1" - name: trustee-operator channels: - name: stable diff --git a/values-azure-spoke.yaml b/values-azure-spoke.yaml index ceb6252f..03066023 100644 --- a/values-azure-spoke.yaml +++ b/values-azure-spoke.yaml @@ -26,7 +26,7 @@ clusterGroup: namespace: openshift-sandboxed-containers-operator channel: stable installPlanApproval: Manual - csv: sandboxed-containers-operator.v1.12.0 + csv: sandboxed-containers-operator.v1.13.1 cert-manager: name: openshift-cert-manager-operator namespace: cert-manager-operator diff --git a/values-azure.yaml b/values-azure.yaml index bd1cf310..1c260d18 100644 --- a/values-azure.yaml +++ b/values-azure.yaml @@ -36,7 +36,7 @@ clusterGroup: namespace: openshift-sandboxed-containers-operator channel: stable installPlanApproval: Manual - csv: sandboxed-containers-operator.v1.13.0 + csv: sandboxed-containers-operator.v1.13.1 trustee: name: trustee-operator namespace: trustee-operator-system diff --git a/values-baremetal-hub.yaml b/values-baremetal-hub.yaml index 4aebd6e3..42b8a378 100644 --- a/values-baremetal-hub.yaml +++ b/values-baremetal-hub.yaml @@ -48,7 +48,7 @@ clusterGroup: namespace: openshift-sandboxed-containers-operator channel: stable installPlanApproval: Manual - csv: sandboxed-containers-operator.v1.13.0 + csv: sandboxed-containers-operator.v1.13.1 annotations: argocd.argoproj.io/sync-wave: "10" trustee: diff --git a/values-baremetal-spoke.yaml b/values-baremetal-spoke.yaml index 5da79347..fb07b693 100644 --- a/values-baremetal-spoke.yaml +++ b/values-baremetal-spoke.yaml @@ -33,7 +33,7 @@ clusterGroup: namespace: openshift-sandboxed-containers-operator channel: stable installPlanApproval: Manual - csv: sandboxed-containers-operator.v1.13.0 + csv: sandboxed-containers-operator.v1.13.1 annotations: argocd.argoproj.io/sync-wave: "10" cert-manager: diff --git a/values-baremetal.yaml b/values-baremetal.yaml index f2c5ccf2..a474dca4 100644 --- a/values-baremetal.yaml +++ b/values-baremetal.yaml @@ -47,7 +47,7 @@ clusterGroup: namespace: openshift-sandboxed-containers-operator channel: stable installPlanApproval: Manual - csv: sandboxed-containers-operator.v1.13.0 + csv: sandboxed-containers-operator.v1.13.1 annotations: argocd.argoproj.io/sync-wave: "10" trustee: