Merge source/main into implement-kopia branch

perfectra1n · perfectra1n · commit eb6c88b9568a · 2025-08-27T17:31:23.000Z
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -17,7 +17,7 @@ exclude: |
   )$
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: "v5.0.0"
+    rev: "v6.0.0"
     hooks:
       - id: check-added-large-files  # Prevents giant files from being committed
       - id: check-json               # Check that JSON files are valid
@@ -55,6 +55,6 @@ repos:
         args: ["--style", ".ci-scripts/mdl-style.rb"]
 
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: "41.40.0"
+    rev: "41.76.0"
     hooks:
       - id: renovate-config-validator
diff --git a/Makefile b/Makefile
@@ -10,13 +10,13 @@ include ./version.mk
 
 # Helper software versions
 CONTROLLER_TOOLS_VERSION := v0.16.3
-GOLANGCI_VERSION := v2.3.1
+GOLANGCI_VERSION := v2.4.0
 HELM_VERSION := v3.18.2
 KUBECTL_VERSION := v1.32.3
-KUSTOMIZE_VERSION := v5.7.0
+KUSTOMIZE_VERSION := v5.7.1
 OPERATOR_SDK_VERSION := v1.33.0
 PIPENV_VERSION := 2025.0.4
-YQ_VERSION := v4.45.4
+YQ_VERSION := v4.47.1
 #ENVTEST_VERSION is the version of controller-runtime release branch to fetch the envtest setup script (i.e. release-0.20)
 ENVTEST_VERSION ?= $(shell go list -m -f "{{ .Version }}" sigs.k8s.io/controller-runtime | awk -F'[v.]' '{printf "release-%d.%d", $$2, $$3}')
 #ENVTEST_K8S_VERSION is the version of Kubernetes to use for setting up ENVTEST binaries (i.e. 1.31)
diff --git a/OWNERS b/OWNERS
@@ -5,6 +5,7 @@ reviewers:
 - jnpacker
 - tesshuflower
 - birsanv
+- falconizmi
 
 approvers:
 - cooktheryan
@@ -13,3 +14,4 @@ approvers:
 - jnpacker
 - tesshuflower
 - birsanv
+- falconizmi
diff --git a/api/v1alpha1/replicationdestination_types.go b/api/v1alpha1/replicationdestination_types.go
@@ -125,7 +125,7 @@ type ReplicationDestinationRsyncSpec struct {
 	//+kubebuilder:validation:Maximum=65535
 	//+optional
 	Port *int32 `json:"port,omitempty"`
-	// path is the remote path to rsync from. Defaults to "/"
+	// This field is not used and will be ignored
 	//+optional
 	Path *string `json:"path,omitempty"`
 	// sshUser is the username for outgoing SSH connections. Defaults to "root".
diff --git a/api/v1alpha1/replicationsource_types.go b/api/v1alpha1/replicationsource_types.go
@@ -111,7 +111,7 @@ type ReplicationSourceRsyncSpec struct {
 	//+kubebuilder:validation:Maximum=65535
 	//+optional
 	Port *int32 `json:"port,omitempty"`
-	// path is the remote path to rsync to. Defaults to "/"
+	// This field is not used and will be ignored
 	//+optional
 	Path *string `json:"path,omitempty"`
 	// sshUser is the username for outgoing SSH connections. Defaults to "root".
diff --git a/bundle/manifests/volsync.backube_replicationdestinations.yaml b/bundle/manifests/volsync.backube_replicationdestinations.yaml
@@ -4351,8 +4351,7 @@ spec:
                       The service account needs to exist in the same namespace as the ReplicationDestination.
                     type: string
                   path:
-                    description: path is the remote path to rsync from. Defaults to
-                      "/"
+                    description: This field is not used and will be ignored
                     type: string
                   port:
                     description: port is the SSH port to connect to for replication.
diff --git a/bundle/manifests/volsync.backube_replicationsources.yaml b/bundle/manifests/volsync.backube_replicationsources.yaml
@@ -4320,8 +4320,7 @@ spec:
                       The service account needs to exist in the same namespace as the ReplicationSource.
                     type: string
                   path:
-                    description: path is the remote path to rsync to. Defaults to
-                      "/"
+                    description: This field is not used and will be ignored
                     type: string
                   port:
                     description: port is the SSH port to connect to for replication.
diff --git a/bundle/manifests/volsync.clusterserviceversion.yaml b/bundle/manifests/volsync.clusterserviceversion.yaml
@@ -55,7 +55,7 @@ metadata:
         }
       ]
     capabilities: Basic Install
-    createdAt: "2025-08-14T23:12:42Z"
+    createdAt: "2025-08-20T15:32:39Z"
     olm.skipRange: '>=0.4.0 <0.14.0'
     operators.operatorframework.io/builder: operator-sdk-v1.33.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
@@ -162,25 +162,26 @@ spec:
         - apiGroups:
           - ""
           resources:
-          - persistentvolumes
+          - persistentvolumeclaims/finalizers
+          - secrets
+          - serviceaccounts
+          - services
           verbs:
+          - create
+          - delete
           - get
           - list
           - patch
+          - update
           - watch
         - apiGroups:
           - ""
           resources:
-          - secrets
-          - serviceaccounts
-          - services
+          - persistentvolumes
           verbs:
-          - create
-          - delete
           - get
           - list
           - patch
-          - update
           - watch
         - apiGroups:
           - ""
@@ -285,7 +286,9 @@ spec:
           - volsync.backube
           resources:
           - replicationdestinations
+          - replicationdestinations/finalizers
           - replicationsources
+          - replicationsources/finalizers
           verbs:
           - create
           - delete
diff --git a/config/crd/bases/volsync.backube_replicationdestinations.yaml b/config/crd/bases/volsync.backube_replicationdestinations.yaml
@@ -4351,8 +4351,7 @@ spec:
                       The service account needs to exist in the same namespace as the ReplicationDestination.
                     type: string
                   path:
-                    description: path is the remote path to rsync from. Defaults to
-                      "/"
+                    description: This field is not used and will be ignored
                     type: string
                   port:
                     description: port is the SSH port to connect to for replication.
diff --git a/config/crd/bases/volsync.backube_replicationsources.yaml b/config/crd/bases/volsync.backube_replicationsources.yaml
@@ -4320,8 +4320,7 @@ spec:
                       The service account needs to exist in the same namespace as the ReplicationSource.
                     type: string
                   path:
-                    description: path is the remote path to rsync to. Defaults to
-                      "/"
+                    description: This field is not used and will be ignored
                     type: string
                   port:
                     description: port is the SSH port to connect to for replication.
diff --git a/docs/usage/rsync/index.rst b/docs/usage/rsync/index.rst
@@ -271,9 +271,7 @@ sshKeys
    a new Secret. The name of that new Secret will be placed in
    .status.rsync.sshKeys.
 path
-   This determines the path within the destination volume where the data should
-   be written. In order to create a replica of the source volume, this should be
-   left as the default of ``/``.
+   This field is not used and will be ignored.
 port
    This determines the TCP port number that is used to connect via ssh. The
    default is 22.
diff --git a/hack/setup-kind-cluster.sh b/hack/setup-kind-cluster.sh
@@ -5,7 +5,7 @@ set -e -o pipefail
 # Possible versions:
 # https://hub.docker.com/r/kindest/node/tags?page=1&ordering=name
 # skopeo list-tags docker://kindest/node
-KUBE_VERSION="${1:-1.31.0}"
+KUBE_VERSION="${1:-1.33.1}"
 
 function log {
   echo "=====  $*  ====="
@@ -258,7 +258,7 @@ case "$KUBE_MINOR" in
     ;;
   *)
     # renovate: datasource=github-releases depName=kubernetes-csi/csi-driver-host-path versioning=semver-coerced
-    TAG="v1.16.1"
+    TAG="v1.17.0"
     DEPLOY_SCRIPT="deploy.sh"
     ;;
 esac
diff --git a/helm/volsync/templates/deployment-controller.yaml b/helm/volsync/templates/deployment-controller.yaml
@@ -68,12 +68,7 @@ spec:
               protocol: TCP
               name: https
           resources:
-            limits:
-              cpu: 500m
-              memory: 128Mi
-            requests:
-              cpu: 5m
-              memory: 64Mi
+            {{- toYaml (index .Values "kube-rbac-proxy-resources") | nindent 12 }}
         - name: manager
           args:
             - --health-probe-bind-address=:8081
diff --git a/helm/volsync/templates/volsync.backube_replicationdestinations.yaml b/helm/volsync/templates/volsync.backube_replicationdestinations.yaml
@@ -4165,7 +4165,7 @@ spec:
                         The service account needs to exist in the same namespace as the ReplicationDestination.
                       type: string
                     path:
-                      description: path is the remote path to rsync from. Defaults to "/"
+                      description: This field is not used and will be ignored
                       type: string
                     port:
                       description: port is the SSH port to connect to for replication. Defaults to 22.
diff --git a/helm/volsync/templates/volsync.backube_replicationsources.yaml b/helm/volsync/templates/volsync.backube_replicationsources.yaml
@@ -4124,7 +4124,7 @@ spec:
                         The service account needs to exist in the same namespace as the ReplicationSource.
                       type: string
                     path:
-                      description: path is the remote path to rsync to. Defaults to "/"
+                      description: This field is not used and will be ignored
                       type: string
                     port:
                       description: port is the SSH port to connect to for replication. Defaults to 22.
diff --git a/helm/volsync/values.yaml b/helm/volsync/values.yaml
@@ -81,6 +81,14 @@ securityContext:
       - ALL
   readOnlyRootFilesystem: true
 
+kube-rbac-proxy-resources:
+  limits:
+    cpu: 500m
+    memory: 128Mi
+  requests:
+    cpu: 5m
+    memory: 64Mi
+
 resources:
   limits:
     cpu: 1000m
