Merge branch 'master' into components-contrib-1.15.2

Author: cicoyle

docs/release_notes/v1.15.4.md

@@ -3,6 +3,7 @@
 This update includes bug fixes:
 
 - [Fix degradation of Workflow runtime performance over time](#fix-degradation-of-workflow-runtime-performance-over-time)
+- [Allow Service Account for MetalBear mirrord operator in sidecar injector](#allow-service-account-for-metalbear-mirrord-operator-in-sidecar-injector)
 
 ## Fix degradation of Workflow runtime performance over time
 
@@ -23,3 +24,21 @@ This caused Jobs to fail, and enter failure policy retry loops.
 ### Solution
 
 Refactor the Scheduler connection pool logic to properly prune stale connections to prevent job execution occurring on stale connections and causing failure policy loops.
+
+## Allow Service Account for MetalBear mirrord operator in sidecar injector
+
+### Problem
+
+Mirrord Operator is not on the allow list of Service Accounts for the dapr sidecar injector.
+
+### Impact
+
+Running mirrord in `copy_target` mode would cause the pod to initalise with without the dapr container.
+
+### Root cause
+
+Mirrord Operator is not on the allow list of Service Accounts for the dapr sidecar injector.
+
+### Solution
+
+Add the Mirrord Operator into the allow list of Service Accounts for the dapr sidecar injector.

pkg/injector/service/injector.go

@@ -59,6 +59,8 @@ var AllowedServiceAccountInfos = []string{
 	"kube-system:daemon-set-controller",
 	"openshift-operator-lifecycle-manager:olm-operator-serviceaccount",
 	"tekton-pipelines:tekton-pipelines-controller",
+	//nolint:misspell
+	"mirrord:mirrord-operator",
 }
 
 type (