diff --git a/release_notes/ocp-4-12-release-notes.adoc b/release_notes/ocp-4-12-release-notes.adoc index 79e21a1310..43406f24e6 100644 --- a/release_notes/ocp-4-12-release-notes.adoc +++ b/release_notes/ocp-4-12-release-notes.adoc @@ -668,6 +668,17 @@ For more information on platform Operators, see xref:../operators/admin/olm-mana [id="ocp-4-12-osdk"] === Operator development +[id="ocp-4-12-osdk-security-context-config"] +==== Configuring the security context of a catalog pod + +You can configure the security context of a catalog pod by using the `--security-context-config` flag on the `run bundle` and `bundle-upgrade` subcommands. The flag enables seccomp profiles to comply with pod security admission. The flag accepts the values of `restricted` and `legacy`. If you do not specify a value, the seccomp profile defaults to `restricted`. If your catalog pod cannot run with restricted permissions, set the flag to `legacy`, as shown in the following example: + +[source,terminal] +---- +$ operator-sdk run bundle \ + --security-context-config=legacy +---- + [id="ocp-4-12-jenkins"] === Jenkins @@ -938,6 +949,31 @@ If you are receiving pod security violations, see the following resources: * If necessary, you can set a custom admission profile on the namespace or pod by setting the `pod-security.kubernetes.io/enforce` label. +[discrete] +[id="ocp-4-12-operator-sdk-1-25-1"] +==== Operator SDK 1.25.0 + +{product-title} 4.12 supports Operator SDK 1.25.0. See xref:../cli_reference/osdk/cli-osdk-install.adoc#cli-osdk-install[Installing the Operator SDK CLI] to install or update to this latest version. + +[NOTE] +==== +Operator SDK 1.25.0 supports Kubernetes 1.25. + +For more information, see xref:../release_notes/ocp-4-12-release-notes.adoc#ocp-4-12-removed-kube-1-25-apis[Beta APIs removed from Kubernetes 1.25]. +==== + +If you have Operator projects that were previously created or maintained with Operator SDK 1.22.0, update your projects to keep compatibility with Operator SDK 1.25.0. + +* xref:../operators/operator_sdk/golang/osdk-golang-updating-projects.adoc#osdk-upgrading-projects_osdk-golang-updating-projects[Updating Go-based Operator projects] + +* xref:../operators/operator_sdk/ansible/osdk-ansible-updating-projects.adoc#osdk-upgrading-projects_osdk-ansible-updating-projects[Updating Ansible-based Operator projects] + +* xref:../operators/operator_sdk/helm/osdk-helm-updating-projects.adoc#osdk-upgrading-projects_osdk-helm-updating-projects[Updating Helm-based Operator projects] + +* xref:../operators/operator_sdk/helm/osdk-hybrid-helm-updating-projects.adoc#osdk-upgrading-projects_osdk-hybrid-helm-updating-projects[Updating Hybrid Helm-based Operator projects] + +* xref:../operators/operator_sdk/java/osdk-java-updating-projects.adoc#osdk-upgrading-projects_osdk-java-updating-projects[Updating Java-based Operator projects] + [id="ocp-4-12-deprecated-removed-features"] == Deprecated and removed features