From 9108440c5cce534f8626e7c227f91abb42c84f35 Mon Sep 17 00:00:00 2001
From: Scott Trent <trent@jp.ibm.com>
Date: Wed, 11 Sep 2024 09:21:25 +0900
Subject: [PATCH] finalize updates

Signed-off-by: Scott Trent <trent@jp.ibm.com>
---
 .../susql-operator.clusterserviceversion.yaml  | 18 ++++++++++++------
 config/manager/kustomization.yaml              |  2 +-
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/bundle/manifests/susql-operator.clusterserviceversion.yaml b/bundle/manifests/susql-operator.clusterserviceversion.yaml
index 4f0e484..fb5eee9 100644
--- a/bundle/manifests/susql-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/susql-operator.clusterserviceversion.yaml
@@ -27,15 +27,15 @@ metadata:
       ]
     capabilities: Basic Install
     categories: Monitoring
-    containerImage: quay.io/sustainable_computing_io/susql_operator:0.0.29
-    createdAt: "2024-09-10T06:44:16Z"
+    containerImage: quay.io/sustainable_computing_io/susql_operator:0.0.30
+    createdAt: "2024-09-11T00:19:43Z"
     description: 'Aggregates energy and CO2 emission data for pods tagged with SusQL
       labels '
     operators.operatorframework.io/builder: operator-sdk-v1.36.1
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
     repository: https://github.com/sustainable-computing-io/susql-operator
     support: https://github.com/sustainable-computing-io/susql-operator/issues
-  name: susql-operator.v0.0.29
+  name: susql-operator.v0.0.30
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -204,7 +204,10 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
+                  runAsGroup: 14001
                   runAsNonRoot: true
+                  runAsUser: 14001
               - command:
                 - /manager
                 env:
@@ -298,7 +301,7 @@ spec:
                       key: CARBON-QUERY-CONV-2J
                       name: susql-config
                       optional: true
-                image: quay.io/sustainable_computing_io/susql_operator:0.0.29
+                image: quay.io/sustainable_computing_io/susql_operator:0.0.30
                 imagePullPolicy: Always
                 livenessProbe:
                   httpGet:
@@ -329,8 +332,12 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  runAsGroup: 12001
+                  runAsUser: 12001
               securityContext:
+                runAsGroup: 11001
                 runAsNonRoot: true
+                runAsUser: 11001
               serviceAccountName: susql-operator-susql-controller-manager
               terminationGracePeriodSeconds: 10
       permissions:
@@ -401,5 +408,4 @@ spec:
   provider:
     name: SusQL Operator Contributors
     url: https://github.com/sustainable-computing-io/susql-operator
-  replaces: susql-operator.v0.0.28
-  version: 0.0.29
+  version: 0.0.30
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index d5ba0e4..93ada85 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -5,4 +5,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: quay.io/sustainable_computing_io/susql_operator
-  newTag: 0.0.29
+  newTag: 0.0.30