Skip to content

Conversation

@pengzhouml
Copy link
Collaborator

Also include the fix for MLE-24842: Security vulnerabilities in Operator

@pengzhouml pengzhouml requested a review from rwinieski October 28, 2025 04:38
@rwinieski rwinieski requested a review from Copilot October 28, 2025 08:25
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the MarkLogic Operator for the 1.1 release by upgrading Go to 1.24.9, updating Kubernetes client libraries to v0.34.1, controller-runtime to v0.22.3, and various other dependencies. It also addresses security vulnerabilities by adding runAsNonRoot: true to security contexts and includes code quality improvements such as removing unnecessary type conversions, simplifying variable declarations, handling ignored errors, and adding deprecation markers for unused functions.

Reviewed Changes

Copilot reviewed 27 out of 28 changed files in this pull request and generated no comments.

Show a summary per file
File Description
go.mod Updates Go version and upgrades Kubernetes and controller-runtime dependencies
pkg/k8sutil/statefulset.go Adds SecretName fallback logic with conditional assignment
pkg/k8sutil/service.go Simplifies variable declarations by removing redundant type specifications
pkg/k8sutil/networkPolicy.go Simplifies variable declaration and adds deprecation comment for unused function
pkg/k8sutil/marklogicServer.go Handles previously ignored return values from result.Done()
pkg/k8sutil/ingress.go Replaces loop-based append with variadic append and adds deprecation comment
pkg/k8sutil/haProxyHelper.go Removes unnecessary int() type conversions and simplifies boolean comparison
pkg/k8sutil/haProxy.go Adds error handling for patch calculation
internal/controller/*.go Reorders imports to place standard library before third-party imports
config/manager/*.yaml Adds runAsNonRoot: true security context setting
config/crd/bases/*.yaml Updates CRD files with new controller-gen version and API documentation changes
charts/*.yaml Updates version to 1.1.0 and adds security contexts
test/e2e/*.go Removes unnecessary string() conversions and simplifies fmt.Sprintf usage
Makefile Updates version to 1.1.0, Kubernetes version, and tooling versions
Dockerfile Updates Go base image to 1.24.9
.golangci.yml Updates linter configuration

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@pengzhouml pengzhouml merged commit 6f2dc72 into release/1.1.0 Oct 28, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants