Merge branch 'main' into feat/retire-ca-certs

Author: siegfriedweber

.gitattributes

@@ -1,3 +1,4 @@
 nix/** linguist-generated
 Cargo.nix linguist-generated
 crate-hashes.json linguist-generated
+extra/crds.yaml linguist-generated

.github/workflows/integration-test.yml

@@ -15,7 +15,8 @@ on:
           - profile
           - custom
       test-mode-input:
-        description: The profile or the runner used
+        description: |
+          The profile or the runner used. Eg: `smoke-latest` or `amd64` (see test/interu.yaml)
         required: true
       test-suite:
         description: Name of the test-suite. Only used if test-mode is `custom`

.gitignore

@@ -13,6 +13,7 @@ result
 image.tar
 
 tilt_options.json
+local_values.yaml
 
 .direnv/
 .direnvrc

CHANGELOG.md

@@ -6,14 +6,37 @@ All notable changes to this project will be documented in this file.
 
 ### Added
 
+- Add end-of-support checker which can be controlled with environment variables and CLI arguments ([#644]).
+  - `EOS_CHECK_MODE` (`--eos-check-mode`) to set the EoS check mode. Currently, only "offline" is supported.
+  - `EOS_INTERVAL` (`--eos-interval`) to set the interval in which the operator checks if it is EoS.
+  - `EOS_DISABLED` (`--eos-disabled`) to disable the EoS checker completely.
 - Support exporting the TrustStore CA certificate information to Secrets or ConfigMaps ([#597]).
+- New helm value for `priorityClassName` ([#641]).
 
 ### Changed
 
+- Split operator deployment into Deployment and DaemonSet ([#645]).
+  - Introduce two different modes: `csi-server` and `controller`.
+  - The CSI server is deployed via a DaemonSet to be available on every node.
+  - The controller is deployed via a Deployment with a single replica.
 - Version CRD structs and enums as v1alpha1 ([#636]).
+- BREAKING: Rearrange values to be somewhat consistent with the listener-operator value changes ([#641], [#645]).
+  - `csiProvisioner` values have been moved to `csiNodeDriver.externalProvisioner`.
+  - `csiNodeDriverRegistrar` values have been moved to `csiNodeDriver.nodeDriverRegistrar`.
+  - `node.driver.resources` values have been split into `controllerService.resources` and `csiNodeDriver.nodeService.resources`.
+  - `securityContext` values have been split into `controllerService.securityContext` and `.csiNodeDriver.nodeService.securityContext`.
+  - `podAnnotations`, `podSecurityContext`, `nodeSelector`, `tolerations`, and `affinity` have been split into `controllerService` and `csiNodeDriver`.
+  - `kubeletDir` has been move to `csiNodeDriver.kubeletDir`.
+- Bump csi-node-driver-registrar to `v2.15.0` ([#642]).
+- Bump csi-provisioner to `v5.3.0` ([#643]).
 
 [#597]: https://github.com/stackabletech/secret-operator/pull/597
 [#636]: https://github.com/stackabletech/secret-operator/pull/636
+[#641]: https://github.com/stackabletech/secret-operator/pull/641
+[#642]: https://github.com/stackabletech/secret-operator/pull/642
+[#643]: https://github.com/stackabletech/secret-operator/pull/643
+[#644]: https://github.com/stackabletech/secret-operator/pull/644
+[#645]: https://github.com/stackabletech/secret-operator/pull/645
 
 ## [25.7.0] - 2025-07-23