UPSTREAM: <carry>: Add openshift specific changes

# Conflicts:
#	.github/workflows/pr-dependabot.yaml
#	.github/workflows/pr-golangci-lint.yaml
#	.github/workflows/pr-verify.yaml
#	OWNERS_ALIASES

Author: alexander-demicev

.ci-operator.yaml

@@ -0,0 +1,4 @@
+build_root_image:
+  name: release
+  namespace: openshift
+  tag: rhel-9-release-golang-1.22-openshift-4.17

.dockerignore

@@ -22,6 +22,7 @@ Makefile
 # We need the following yaml files while building clusterctl in the container
 !cmd/clusterctl/config/manifest/clusterctl-api.yaml
 !cmd/clusterctl/client/cluster/assets/cert-manager-test-resources.yaml
+!openshift/manifests/*.yaml
 
 # ignores changes to test-only code to avoid extra rebuilds
 test/e2e/**

.github/PULL_REQUEST_TEMPLATE.md

@@ -60,7 +60,7 @@ cmd/clusterctl/config/manifest
 
 # The golang vendor directory that contains local copies of external
 # dependencies that satisfy Go imports in this project.
-vendor
+# vendor
 
 # User-supplied Tiltfile extensions, settings, and builds
 tilt.d
@@ -79,13 +79,3 @@ out
 
 # Helm
 .helm
-
-# Used during parts of the build process. Files _should_ get cleaned up automatically.
-# This is also a good location for any temporary manfiests used during development
-tmp
-
-# asdf (not a typo! ;) used to manage multiple versions of tools
-.tool-versions
-
-# Development container configurations (https://containers.dev/)
-.devcontainer

.github/workflows/pr-dependabot.yaml

@@ -0,0 +1,11 @@
+# References:
+# https://docs.snyk.io/scan-applications/snyk-code/using-snyk-code-from-the-cli/excluding-directories-and-files-from-the-snyk-code-cli-test
+# https://docs.snyk.io/snyk-cli/commands/ignore
+exclude:
+  global:
+    - "vendor/**"
+    - "**/vendor/**"
+    - "test/**"
+  SNYK_CODE_WARNING:
+    - "cmd/clusterctl/client/cluster/template.go":
+      reason: "Target command is not exposed to users in OpenShift"

.github/workflows/pr-golangci-lint.yaml

@@ -1,21 +1,21 @@
-# See the OWNERS docs at https://go.k8s.io/owners for information on OWNERS files.
-# See the OWNERS_ALIASES file at https://github.com/kubernetes-sigs/cluster-api/blob/main/OWNERS_ALIASES for a list of members for each alias.
-
+# WARNING: This file is autogenerated. DO NOT edit by hand!!!
+# To update this file please contact an existing owner and request
+# to be added to the owners-gen input data.
 approvers:
-  - sig-cluster-lifecycle-leads
-  - cluster-api-admins
-  - cluster-api-maintainers
-
+- JoelSpeed
+- RadekManak
+- damdo
+- enxebre
+- nrb
+- odvarkadaniel
 reviewers:
-  - cluster-api-maintainers
-  - cluster-api-reviewers
-
-emeritus_approvers:
-  - CecileRobertMichon
-  - chuckha
-  - detiber
-  - kris-nova
-  - ncdc
-  - roberthbailey
-  - davidewatson
-  - ykakarap
+- JoelSpeed
+- RadekManak
+- damdo
+- elmiko
+- nrb
+- odvarkadaniel
+- racheljpg
+- vincepri
+component: Cloud Compute
+subcomponent: Other Provider