Merge remote-tracking branch 'upstream/main'

Author: moulalis

.github/workflows/rhai-on-xks-chart-test.yaml

@@ -15,16 +15,48 @@ permissions:
 
 jobs:
   e2e-test:
-    if: >-
-      github.event_name == 'push' ||
-      (github.event.action == 'labeled' && github.event.label.name == 'run-xks-e2e') ||
-      (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'run-xks-e2e'))
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
         cloud_provider: [azure, coreweave, aws]
     steps:
+      - name: Check authorization
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          AUTHOR_ASSOCIATION: ${{ github.event.pull_request.author_association }}
+          AUTHOR_LOGIN: ${{ github.event.pull_request.user.login }}
+          EVENT_ACTION: ${{ github.event.action }}
+          LABEL_NAME: ${{ github.event.label.name }}
+          HAS_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'run-xks-e2e') }}
+        run: |
+          TRUSTED_BOTS=("github-actions[bot]" "red-hat-konflux[bot]" "jira-autofix[bot]")
+
+          if [[ "$EVENT_NAME" == "push" ]]; then
+            echo "Push to main — running automatically"
+            exit 0
+          fi
+          if [[ "$AUTHOR_ASSOCIATION" =~ ^(OWNER|MEMBER|COLLABORATOR)$ ]]; then
+            echo "Trusted contributor — running automatically"
+            exit 0
+          fi
+          for bot in "${TRUSTED_BOTS[@]}"; do
+            if [[ "$AUTHOR_LOGIN" == "$bot" ]]; then
+              echo "Trusted bot — running automatically"
+              exit 0
+            fi
+          done
+          if [[ "$EVENT_ACTION" == "labeled" && ( "$LABEL_NAME" == "lgtm" || "$LABEL_NAME" == "approved" ) ]]; then
+            echo "Reviewer approval ($LABEL_NAME) — running automatically"
+            exit 0
+          fi
+          if [[ "$HAS_LABEL" == "true" ]]; then
+            echo "External contributor — approved via 'run-xks-e2e' label"
+            exit 0
+          fi
+          echo "::error::xKS e2e tests required. A maintainer must add the 'run-xks-e2e' label after reviewing the code."
+          exit 1
+
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:

charts/dependencies/rhcl-operator/Chart.yaml

@@ -0,0 +1,15 @@
+apiVersion: v2
+name: rhcl-operator
+description: Red Hat Connectivity Link (Kuadrant) operators for vanilla Kubernetes (without OLM)
+type: application
+version: 1.0.0
+appVersion: "1.3.0"
+keywords:
+  - kuadrant
+  - authorino
+  - limitador
+  - rhcl
+  - api-gateway
+  - rate-limiting
+maintainers:
+  - name: Red Hat

charts/dependencies/rhcl-operator/api-docs.md

@@ -0,0 +1,21 @@
+# rhcl-operator
+
+![Version: 1.0.0](https://img.shields.io/badge/Version-1.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.3.0](https://img.shields.io/badge/AppVersion-1.3.0-informational?style=flat-square)
+
+Red Hat Connectivity Link (Kuadrant) operators for vanilla Kubernetes (without OLM)
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| Red Hat |  |  |
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| bundle.version | string | `"1.3.0"` |  |
+| imagePullSecrets[0].name | string | `"rhai-pull-secret"` |  |
+| operandNamespace | string | `"kuadrant-system"` |  |
+| operatorNamespace | string | `"kuadrant-operators"` |  |
+