chore: update RHAI XKS chart bundle from rhods-operator main

github-actions[bot] · github-actions[bot] · commit fb5559a6ff94 · 2026-06-20T07:26:40.000Z
diff --git a/charts/rhai-on-xks-chart/templates/manager/deployment-rhods-operator.yaml b/charts/rhai-on-xks-chart/templates/manager/deployment-rhods-operator.yaml
@@ -15,6 +15,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/templates/rbac/clusterrole-rhods-operator-role.yaml b/charts/rhai-on-xks-chart/templates/rbac/clusterrole-rhods-operator-role.yaml
@@ -325,7 +325,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -397,6 +396,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -1246,7 +1246,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
diff --git a/charts/rhai-on-xks-chart/test/snapshots/aws-with-allowed-routes-all.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/aws-with-allowed-routes-all.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/aws-with-allowed-routes-same.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/aws-with-allowed-routes-same.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/aws-with-pull-secret.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/aws-with-pull-secret.snap.yaml
@@ -1458,7 +1458,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1530,6 +1529,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2379,7 +2379,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2792,6 +2791,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/aws.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/aws.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-byo-issuer.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-byo-issuer.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-gateway-hostname.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-gateway-hostname.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-namespaced-issuer.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-namespaced-issuer.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-pull-secret.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-pull-secret.snap.yaml
@@ -1458,7 +1458,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1530,6 +1529,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2379,7 +2379,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2792,6 +2791,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-related-images.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-related-images.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/azure-with-tls-disabled.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/azure-with-tls-disabled.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/coreweave-with-allowed-routes-selector.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/coreweave-with-allowed-routes-selector.snap.yaml
@@ -1338,7 +1338,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - components.platform.opendatahub.io
@@ -1410,6 +1409,7 @@ rules:
   - apiGroups:
       - config.openshift.io
     resources:
+      - apiservers
       - authentications
       - clusterversions
       - infrastructures
@@ -2259,7 +2259,6 @@ rules:
       - list
       - patch
       - update
-      - use
       - watch
   - apiGroups:
       - services.platform.opendatahub.io
@@ -2672,6 +2671,7 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: rhai-operator
+        openshift.io/required-scc: restricted-v2
       labels:
         name: rhai-operator
     spec:
diff --git a/charts/rhai-on-xks-chart/test/snapshots/coreweave-with-pull-secret.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/coreweave-with-pull-secret.snap.yaml
diff --git a/charts/rhai-on-xks-chart/test/snapshots/coreweave.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/coreweave.snap.yaml
diff --git a/charts/rhai-on-xks-chart/test/snapshots/with-custom-namespace.snap.yaml b/charts/rhai-on-xks-chart/test/snapshots/with-custom-namespace.snap.yaml
