Merge branch 'master' into fix-intellij-idea-integration

Author: olivergondza

Dockerfile

@@ -16,8 +16,9 @@ COPY controllers/ controllers/
 COPY common/ common/
 COPY version/ version/
 
-# Build
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager ./cmd/main.go
+# Build - Use TARGETARCH to build for the correct architecture
+ARG TARGETARCH
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -a -o manager ./cmd/main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details

Makefile

@@ -65,7 +65,8 @@ IMG ?= $(IMAGE):$(VERSION)
 # Set the Operator SDK version to use.
 # This is useful for CI or a project to utilize a specific version of the operator-sdk toolkit.
 OPERATOR_SDK_VERSION ?= v1.35.0
-
+# Set the path to Operator SDK - OPERATOR_SDK_VERSION will be ignored.
+OPERATOR_SDK ?= bin/operator-sdk
 
 # Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
 ifeq (,$(shell go env GOBIN))
@@ -131,19 +132,6 @@ test-e2e: manifests generate fmt vet ## Run e2e tests.
 test-metrics:
 	go test -timeout 30m ./test/e2e -ginkgo.focus="Argo CD metrics controller" -coverprofile cover.out -ginkgo.v
 
-.PHONY: operator-sdk
-OPERATOR_SDK ?= $(LOCALBIN)/operator-sdk
-operator-sdk: ## Download operator-sdk locally if necessary.
-ifeq (,$(wildcard $(OPERATOR_SDK)))
-	@{ \
-	set -e ;\
-	mkdir -p $(dir $(OPERATOR_SDK)) ;\
-	OS=$(shell go env GOOS) && ARCH=$(shell go env GOARCH) && \
-	curl -sSLo $(OPERATOR_SDK) https://github.com/operator-framework/operator-sdk/releases/download/$(OPERATOR_SDK_VERSION)/operator-sdk_$${OS}_$${ARCH} ;\
-	chmod +x $(OPERATOR_SDK) ;\
-	}
-endif
-
 .PHONY: test-route
 test-route:
 	go test -timeout 30m ./test/e2e -ginkgo.focus="Argo CD ConsoleLink controller" -coverprofile cover.out -ginkgo.v
@@ -211,7 +199,7 @@ build: generate fmt vet ## Build manager binary.
 
 .PHONY: run
 run: manifests generate fmt vet ## Run a controller from your host.
-	CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES=argo-rollouts,test-rom-ns-1,rom-ns-1,openshift-gitops  ARGOCD_CLUSTER_CONFIG_NAMESPACES="openshift-gitops, argocd-e2e-cluster-config, argocd-test-impersonation-1-046, argocd-agent-principal-1-051, argocd-agent-agent-1-052, appset-argocd, appset-old-ns, appset-new-ns, ns-hosting-principal, ns-hosting-managed-agent, ns-hosting-autonomous-agent"  REDIS_CONFIG_PATH="build/redis"   go run ./cmd/main.go
+	CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES=argo-rollouts,test-rom-ns-1,rom-ns-1,openshift-gitops  ARGOCD_CLUSTER_CONFIG_NAMESPACES="openshift-gitops, argocd-e2e-cluster-config, argocd-test-impersonation-1-046, argocd-agent-principal-1-051, argocd-agent-agent-1-052, appset-argocd, appset-old-ns, appset-new-ns, ns-hosting-principal, ns-hosting-managed-agent, ns-hosting-autonomous-agent, appset-argocd-clusterrole"  REDIS_CONFIG_PATH="build/redis"   go run ./cmd/main.go
 
 .PHONY: docker-build
 docker-build: test ## Build container image with the manager.
@@ -223,27 +211,17 @@ docker-push: ## Push container image with the manager.
 
 ##@ Build Dependencies
 
-## Location to install dependencies to
-LOCALBIN ?= $(shell pwd)/bin
-$(LOCALBIN):
-	mkdir -p $(LOCALBIN)
+# Do not use OPERATOR_SDK variable not to overwrite the user provided path
+bin/operator-sdk:
+	mkdir -p bin
+	curl -sSLo bin/operator-sdk \
+		https://github.com/operator-framework/operator-sdk/releases/download/$(OPERATOR_SDK_VERSION)/operator-sdk_$(shell go env GOOS)_$(shell go env GOARCH)
+	chmod +x bin/operator-sdk
 
+# Install to bin/operator-sdk unless already there or explicit OPERATOR_SDK provided
 .PHONY: operator-sdk
-OPERATOR_SDK ?= $(LOCALBIN)/operator-sdk
-operator-sdk: ## Download operator-sdk locally if necessary.
-ifeq (,$(wildcard $(OPERATOR_SDK)))
-ifeq (,$(shell which operator-sdk 2>/dev/null))
-	@{ \
-	set -e ;\
-	mkdir -p $(dir $(OPERATOR_SDK)) ;\
-	OS=$(shell go env GOOS) && ARCH=$(shell go env GOARCH) && \
-	curl -sSLo $(OPERATOR_SDK) https://github.com/operator-framework/operator-sdk/releases/download/$(OPERATOR_SDK_VERSION)/operator-sdk_$${OS}_$${ARCH} ;\
-	chmod +x $(OPERATOR_SDK) ;\
-	}
-else
-OPERATOR_SDK = $(shell which operator-sdk)
-endif
-endif
+operator-sdk: $(OPERATOR_SDK)
+	@$(OPERATOR_SDK) version
 
 ifndef ignore-not-found
   ignore-not-found = false
@@ -368,7 +346,7 @@ gosec: go_sec
 .PHONY: lint
 lint: golangci_lint
 	$(GOLANGCI_LINT) --version
-	GOMAXPROCS=2 $(GOLANGCI_LINT) run --fix --verbose --timeout 300s
+	$(GOLANGCI_LINT) run --fix --verbose --timeout 300s
 
 
 GO_SEC = $(shell pwd)/bin/gosec

docs/Lightspeed BYOK Gitops configuration guide.md

@@ -0,0 +1,49 @@
+# Enhancing OpenShift Lightspeed with Custom Knowledge
+
+## Overview
+This guide explains how to extend the intelligence of OpenShift Lightspeed by integrating specialized knowledge for Argo CD, the Argo CD Operator, and the GitOps Operator. By configuring a custom Retrieval-Augmented Generation (RAG) database, you ensure the service provides precise, context-aware assistance for your GitOps queries.
+
+The OpenShift Lightspeed service leverages Large Language Models (LLMs) to provide intelligent, context-aware responses. To ensure the model has deep expertise in your specific environment, you can use the Bring Your Own (BYO) Knowledge tool to integrate a Retrieval-Augmented Generation (RAG) database.
+
+By connecting this database, you bridge the gap between general AI knowledge and specific technical documentation, ensuring more accurate troubleshooting and configuration advice.
+
+
+## Pre-packaged Knowledge for GitOps
+We have curated and optimized specialized knowledge sets for the following components:
+
+* ArgoCD
+* ArgoCD Operator
+* Red Hat OpenShift GitOps Operator
+* ArgoCD Agent
+
+This knowledge is packaged into a container [image](https://quay.io/devtools_gitops/argocd_lightspeed_byok:v0.0.4) and can be configured in Lightspeed using the instructions below.
+
+## Prerequisites
+
+* You are logged in to the OpenShift Container Platform web console as a user account that has permission to create a cluster-scoped custom resource (CR) file, such as a user with the cluster-admin role.
+* You have an LLM provider available for use with the OpenShift Lightspeed Service.
+* You have installed and configured the [OpenShift Lightspeed Operator](https://docs.redhat.com/en/documentation/red_hat_openshift_lightspeed/1.0/html/configure/ols-configuring-openshift-lightspeed).
+
+Modify the OLSconfig CR to deploy the pre-packaged RAG database alongside the existing one:
+
+* In the OpenShift Container Platform web console, click Operators  >> Installed Operators.
+* Select All Projects in the Project dropdown at the top of the screen.
+* Click OpenShift Lightspeed Operator.
+* Click OLSConfig, then click the cluster configuration instance in the list.
+* Click the YAML tab.
+* Insert the spec.ols.rag yaml code:
+  Example OLSconfig CR file
+
+```bash
+apiVersion: ols.openshift.io/v1alpha1
+kind: OLSConfig
+metadata:
+  name: cluster
+spec:
+  ols:
+    rag:
+      - image: quay.io/devtools_gitops/argocd_lightspeed_byok:v0.0.4
+```
+
+Note: Where image specifies the tag for the image that is present in the image registry so that the OpenShift Lightspeed Operator can access the custom content.
+* Click Save.

go.mod

@@ -5,8 +5,8 @@ go 1.25.5
 require (
 	github.com/argoproj-labs/argo-rollouts-manager v0.0.8-0.20260224121037-1824164aac67
 	github.com/argoproj-labs/argocd-image-updater v1.1.1
-	github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260227080902-0433a07294f8
-	github.com/argoproj/argo-cd/v3 v3.3.0
+	github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260304133241-fd7fd59a2b0b
+	github.com/argoproj/argo-cd/v3 v3.3.2
 	github.com/argoproj/gitops-engine v0.7.1-0.20251217140045-5baed5604d2d
 	github.com/go-logr/logr v1.4.3
 	github.com/google/go-cmp v0.7.0

go.sum

@@ -39,10 +39,10 @@ github.com/argoproj-labs/argo-rollouts-manager v0.0.8-0.20260224121037-1824164aa
 github.com/argoproj-labs/argo-rollouts-manager v0.0.8-0.20260224121037-1824164aac67/go.mod h1:WPyZkNHZjir/OTt8mrRwcUZKe1euHrHPJsRv1Wp/F/0=
 github.com/argoproj-labs/argocd-image-updater v1.1.1 h1:7YDaR3WX2NMsDKp0wN7TRaRRHaVHQ94tSybi2P99MGk=
 github.com/argoproj-labs/argocd-image-updater v1.1.1/go.mod h1:gMHiNrGNwNSt4ljf0ykcnmNvXBk/NJ+Z17AnZVe7V7I=
-github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260227080902-0433a07294f8 h1:MZH+YNGfucyny7tX2Fs4aNNQgeOuu9Gi7MtjS3L4R1U=
-github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260227080902-0433a07294f8/go.mod h1:3/Y9YWMU+DHC+onOQVXPAxrNkoBAGZD+UQui9BgJBjY=
-github.com/argoproj/argo-cd/v3 v3.3.0 h1:9UlruTd5cC/MyvorTXgAIblfZTy63MF5FYvvoAaUvwU=
-github.com/argoproj/argo-cd/v3 v3.3.0/go.mod h1:5VAfe0s/a4VY5GmAIFK76FtW6xn7zAcLmaw25bOL/2g=
+github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260304133241-fd7fd59a2b0b h1:HxyuUUBlSPwKWSvLHnCibtR4Yz3Z6qpEm5wSi3a5oIw=
+github.com/argoproj-labs/argocd-operator v0.17.0-rc1.0.20260304133241-fd7fd59a2b0b/go.mod h1:J1/kP2zzXbKU5Austr4Eg3qAilMtRyQX8yu0/ALUzD0=
+github.com/argoproj/argo-cd/v3 v3.3.2 h1:kVHBj5Z0Wm2D6s69l0q6lC/WH5tc4E1peXgEEOPrLLU=
+github.com/argoproj/argo-cd/v3 v3.3.2/go.mod h1:5VAfe0s/a4VY5GmAIFK76FtW6xn7zAcLmaw25bOL/2g=
 github.com/argoproj/gitops-engine v0.7.1-0.20251217140045-5baed5604d2d h1:iUJYrbSvpV9n8vyl1sBt1GceM60HhHfnHxuzcm5apDg=
 github.com/argoproj/gitops-engine v0.7.1-0.20251217140045-5baed5604d2d/go.mod h1:PauXVUVcfiTgC+34lDdWzPS101g4NpsUtDAjFBnWf94=
 github.com/argoproj/pkg v0.13.7-0.20250305113207-cbc37dc61de5 h1:YBoLSjpoaJXaXAldVvBRKJuOPvIXz9UOv6S96gMJM/Q=

test/openshift/e2e/ginkgo/fixture/application/fixture.go

@@ -1,6 +1,9 @@
 package application
 
 import (
+	"fmt"
+	"regexp"
+
 	. "github.com/onsi/gomega"
 	"github.com/redhat-developer/gitops-operator/test/openshift/e2e/ginkgo/fixture/utils"
 	"k8s.io/client-go/util/retry"
@@ -83,6 +86,40 @@ func HaveSyncStatusCode(expected appv1alpha1.SyncStatusCode) matcher.GomegaMatch
 
 }
 
+func HaveNoConditions() matcher.GomegaMatcher {
+	return expectedCondition(func(app *appv1alpha1.Application) bool {
+		count := len(app.Status.Conditions)
+		if count == 0 {
+			return true
+		}
+
+		GinkgoWriter.Printf("HaveNoConditions - have: %+v\n", app.Status.Conditions)
+		return false
+	})
+}
+
+func HaveConditionMatching(conditionType appv1alpha1.ApplicationConditionType, messagePattern string) matcher.GomegaMatcher {
+	pattern := regexp.MustCompile(messagePattern)
+
+	return expectedCondition(func(app *appv1alpha1.Application) bool {
+		conditions := app.Status.Conditions
+		var found []string
+		for _, condition := range conditions {
+			found = append(found, fmt.Sprintf("  -  %s/%s", condition.Type, condition.Message))
+
+			if condition.Type == conditionType && pattern.MatchString(condition.Message) {
+				return true
+			}
+		}
+
+		GinkgoWriter.Printf("HaveConditionMatching - expected: %s/%s; current(%d):\n", conditionType, messagePattern, len(conditions))
+		for _, f := range found {
+			GinkgoWriter.Println(f)
+		}
+		return false
+	})
+}
+
 // Update will keep trying to update object until it succeeds, or times out.
 func Update(obj *appv1alpha1.Application, modify func(*appv1alpha1.Application)) {
 	k8sClient, _ := utils.GetE2ETestKubeClient()

test/openshift/e2e/ginkgo/fixture/argocd/fixture.go

@@ -191,32 +191,33 @@ func HaveExternalAuthenticationCondition(expected metav1.Condition) matcher.Gome
 func HaveCondition(condition metav1.Condition) matcher.GomegaMatcher {
 	return fetchArgoCD(func(argocd *argov1beta1api.ArgoCD) bool {
 
-		if len(argocd.Status.Conditions) != 1 {
-			GinkgoWriter.Println("HaveCondition: length is zero")
+		length := len(argocd.Status.Conditions)
+		if length != 1 {
+			GinkgoWriter.Printf("HaveCondition: length is %d\n", length)
 			return false
 		}
 
 		instanceCondition := argocd.Status.Conditions[0]
 
-		GinkgoWriter.Println("HaveCondition - Message:", instanceCondition.Message, condition.Message)
+		GinkgoWriter.Printf("HaveCondition - Message: '%s' / actual: '%s'\n", condition.Message, instanceCondition.Message)
 		if instanceCondition.Message != condition.Message {
 			GinkgoWriter.Println("HaveCondition: message does not match")
 			return false
 		}
 
-		GinkgoWriter.Println("HaveCondition - Reason:", instanceCondition.Reason, condition.Reason)
+		GinkgoWriter.Printf("HaveCondition - Reason: '%s' / actual: '%s'\n", condition.Reason, instanceCondition.Reason)
 		if instanceCondition.Reason != condition.Reason {
 			GinkgoWriter.Println("HaveCondition: reason does not match")
 			return false
 		}
 
-		GinkgoWriter.Println("HaveCondition - Status:", instanceCondition.Status, condition.Status)
+		GinkgoWriter.Printf("HaveCondition - Status: '%s' / actual: '%s'\n", condition.Status, instanceCondition.Status)
 		if instanceCondition.Status != condition.Status {
 			GinkgoWriter.Println("HaveCondition: status does not match")
 			return false
 		}
 
-		GinkgoWriter.Println("HaveCondition - Type:", instanceCondition.Type, condition.Type)
+		GinkgoWriter.Printf("HaveCondition - Type: '%s' / actual: '%s'\n", condition.Type, instanceCondition.Type)
 		if instanceCondition.Type != condition.Type {
 			GinkgoWriter.Println("HaveCondition: type does not match")
 			return false

test/openshift/e2e/ginkgo/fixture/clusterrole/fixture.go

@@ -2,6 +2,7 @@ package clusterrole
 
 import (
 	"context"
+	"reflect"
 
 	. "github.com/onsi/ginkgo/v2"
 	. "github.com/onsi/gomega"
@@ -32,6 +33,13 @@ func Update(obj *rbacv1.ClusterRole, modify func(*rbacv1.ClusterRole)) {
 
 }
 
+func HaveRules(expectedRules []rbacv1.PolicyRule) matcher.GomegaMatcher {
+	return fetchRole(func(cr *rbacv1.ClusterRole) bool {
+		GinkgoWriter.Println("HaveRules - Expected:", expectedRules, "/ Actual:", cr.Rules)
+		return reflect.DeepEqual(expectedRules, cr.Rules)
+	})
+}
+
 // This is intentionally NOT exported, for now. Create another function in this file/package that calls this function, and export that.
 //
 //nolint:unused

test/openshift/e2e/ginkgo/fixture/k8s/fixture.go

@@ -98,15 +98,23 @@ func NotHaveLabelWithValue(key string, value string) matcher.GomegaMatcher {
 // ExistByName checks if the given k8s resource exists, when retrieving it by name/namespace.
 // - It does NOT check if the resource content matches. It only checks that a resource of that type and name exists.
 func ExistByName() matcher.GomegaMatcher {
+	return ExistByNameWithClient(nil)
+}
 
-	return WithTransform(func(k8sObject client.Object) bool {
-		k8sClient, _, err := utils.GetE2ETestKubeClientWithError()
-		if err != nil {
-			GinkgoWriter.Println(err)
-			return false
-		}
+// ExistByNameWithClient checks if the given k8s resource exists, when retrieving it by name/namespace.
+// - It does NOT check if the resource content matches. It only checks that a resource of that type and name exists.
+//
+// NOTE: you probably want to instead use ExistByName()
+func ExistByNameWithClient(k8sClient client.Client) matcher.GomegaMatcher {
+	if k8sClient == nil {
+		var err error
+		k8sClient, _, err = utils.GetE2ETestKubeClientWithError()
+		Expect(err).ToNot(HaveOccurred())
+		Expect(k8sClient).ShouldNot(BeNil())
+	}
 
-		err = k8sClient.Get(context.Background(), client.ObjectKeyFromObject(k8sObject), k8sObject)
+	return WithTransform(func(k8sObject client.Object) bool {
+		err := k8sClient.Get(context.Background(), client.ObjectKeyFromObject(k8sObject), k8sObject)
 		if err != nil {
 			GinkgoWriter.Println("Object does not exists in ExistByName:", k8sObject.GetName(), err)
 		} else {

test/openshift/e2e/ginkgo/parallel/1-031_validate_toolchain_test.go

@@ -85,9 +85,9 @@ var _ = Describe("GitOps Operator Parallel E2E Tests", func() {
 		It("verifies that toolchain versions have the expected values", func() {
 
 			// These variables need to be maintained according to the component matrix: https://spaces.redhat.com/display/GITOPS/GitOps+Component+Matrix
-			expected_kustomizeVersion := "v5.8.0"
+			expected_kustomizeVersion := "v5.8.1"
 			expected_helmVersion := "v3.19.4"
-			expected_argocdVersion := "v3.3.0"
+			expected_argocdVersion := "v3.3.2"
 
 			var expected_dexVersion string
 			var expected_redisVersion string