Merge remote-tracking branch 'origin/main' into feat/conversion-webhook

Author: sbernauer

.github/workflows/build.yml

@@ -17,7 +17,7 @@ env:
   CARGO_TERM_COLOR: always
   CARGO_INCREMENTAL: '0'
   CARGO_PROFILE_DEV_DEBUG: '0'
-  RUST_TOOLCHAIN_VERSION: "1.85.0"
+  RUST_TOOLCHAIN_VERSION: "1.87.0"
   RUSTFLAGS: "-D warnings"
   RUSTDOCFLAGS: "-D warnings"
   RUST_LOG: "info"
@@ -38,10 +38,10 @@ jobs:
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
         with:
           key: udeps
-      - run: cargo install --locked [email protected].55
+      - run: cargo install --locked [email protected].57
       - run: cargo udeps --all-targets --all-features
 
   run_cargodeny:
@@ -60,7 +60,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: EmbarkStudios/cargo-deny-action@34899fc7ba81ca6268d5947a7a16b4649013fea1 # v2.0.11
+      - uses: EmbarkStudios/cargo-deny-action@30f817c6f72275c6d54dc744fbca09ebc958599f # v2.0.12
         with:
           command: check ${{ matrix.checks }}
 
@@ -75,7 +75,7 @@ jobs:
         with:
           toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
           components: rustfmt
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
         with:
           key: doc
       - run: cargo doc --document-private-items
@@ -96,7 +96,7 @@ jobs:
           # for our cases.
           # See: https://github.com/dtolnay/trybuild/issues/236#issuecomment-1620950759
           components: rust-src
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
         with:
           key: test
       - run: cargo test --no-default-features --workspace

.github/workflows/pr_pre-commit.yaml

@@ -19,7 +19,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: stackabletech/actions/run-pre-commit@4bfd3b65f22af597fe784599c077dc34bf5894a7 # v0.8.0
+      - uses: stackabletech/actions/run-pre-commit@4483641a7e24057bd2ba51cb4c3f2f0010ad21b7 # v0.8.4
         with:
           rust: ${{ env.RUST_TOOLCHAIN_VERSION }}
           # rust-src is required for trybuild stderr output comparison to work

.github/workflows/publish-docs.yml

@@ -13,7 +13,7 @@ on:
       - crates/**
 
 env:
-  RUST_TOOLCHAIN_VERSION: "1.85.0"
+  RUST_TOOLCHAIN_VERSION: "1.87.0"
 
 permissions: {}
 
@@ -37,7 +37,7 @@ jobs:
         run: echo '<meta http-equiv="refresh" content="0;url=stackable_operator/index.html">' > target/doc/index.html
 
       - name: Upload Documentation Artifacts
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa #v3.0.1
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
         with:
           path: target/doc
 

.vscode/settings.json

@@ -4,6 +4,8 @@
   "rust-analyzer.rustfmt.overrideCommand": [
     "rustfmt",
     "+nightly-2025-05-26",
+    "--edition",
+    "2024",
     "--"
   ]
 }

Cargo.lock

@@ -4,6 +4,8 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.4.0] - 2025-07-10
+
 ### Added
 
 - Add the function `CertificateAuthority::ca_cert` to easily get the CA `Certificate` ([#1057]).

crates/stackable-certs/CHANGELOG.md

@@ -1,6 +1,6 @@
 [package]
 name = "stackable-certs"
-version = "0.3.1"
+version = "0.4.0"
 authors.workspace = true
 license.workspace = true
 edition.workspace = true

crates/stackable-certs/Cargo.toml

@@ -128,7 +128,8 @@ where
 {
     #[snafu(display("failed to retrieve secret \"{secret_ref}\""))]
     GetSecret {
-        source: kube::Error,
+        #[snafu(source(from(kube::Error, Box::new)))]
+        source: Box<kube::Error>,
         secret_ref: SecretReference,
     },
 
@@ -146,15 +147,19 @@ where
 
     #[snafu(display("failed to read PEM-encoded certificate chain from secret {secret:?}"))]
     ReadChain {
-        source: x509_cert::der::Error,
+        #[snafu(source(from(x509_cert::der::Error, Box::new)))]
+        source: Box<x509_cert::der::Error>,
         secret: ObjectRef<Secret>,
     },
 
     #[snafu(display("failed to parse UTF-8 encoded byte string"))]
     DecodeUtf8String { source: std::str::Utf8Error },
 
     #[snafu(display("failed to deserialize private key from PEM"))]
-    DeserializeKeyFromPem { source: E },
+    DeserializeKeyFromPem {
+        #[snafu(source(from(E, Box::new)))]
+        source: Box<E>,
+    },
 }
 
 /// A certificate authority (CA) which is used to generate and sign

crates/stackable-certs/src/ca/mod.rs

@@ -6,6 +6,19 @@ All notable changes to this project will be documented in this file.
 
 ### Added
 
+- BREAKING: Add two new required CLI arguments: `--operator-namespace` and `-operator-service-name`.
+  These two values are used to construct the service name in the CRD conversion webhook ([#1066]).
+
+### Changed
+
+- BREAKING: Rename two fields of the `ProductOperatorRun` struct for consistency and clarity ([#1066]):
+  - `telemetry_arguments` -> `telemetry`
+  - `cluster_info_opts` -> `cluster_info`
+
+## [0.94.0] - 2025-07-10
+
+### Added
+
 - The default Kubernetes cluster domain name is now fetched from the kubelet API unless explicitly configured ([#1068], [#1071])
   This requires operators to have the RBAC permission to `get` `nodes/proxy` in the apiGroup "", an example RBAC rule could look like:
 
@@ -31,15 +44,12 @@ All notable changes to this project will be documented in this file.
         fieldPath: spec.nodeName
   ```
 
+- Add associated functions on `RoleGroupRef` to return the rolegroup headless and metrics service name ([#1069]).
+
 ### Changed
 
 - Update `kube` to `1.1.0` ([#1049]).
 - BREAKING: Return type for `ListenerOperatorVolumeSourceBuilder::new()` is no longer a `Result` ([#1058]).
-- BREAKING: Require two new CLI arguments: `--operator-namespace` and `-operator-service-name`.
-  These are required, so that the operator knows what Service it needs to enter as CRD conversion webhook ([#1066]).
-- BREAKING: The `ProductOperatorRun` used for CLI arguments has some field renamed for consistency ([#1066]):
-  - `telemetry_arguments` -> `telemetry`
-  - `cluster_info_opts` -> `cluster_info`
 
 ### Fixed
 
@@ -57,6 +67,7 @@ All notable changes to this project will be documented in this file.
 [#1064]: https://github.com/stackabletech/operator-rs/pull/1064
 [#1066]: https://github.com/stackabletech/operator-rs/pull/1066
 [#1068]: https://github.com/stackabletech/operator-rs/pull/1068
+[#1069]: https://github.com/stackabletech/operator-rs/pull/1069
 [#1071]: https://github.com/stackabletech/operator-rs/pull/1071
 
 ## [0.93.2] - 2025-05-26