chore(deps): update trustee-operator to 82c9af3

[red-hat-konflux]

Image created from 'https://github.com/openshift/trustee-operator?rev=9c6a02983613412dd64bef474d5f9e2acad89e8f'

This PR contains the following updates:

Package	Update	Change
quay.io/redhat-user-workloads/ose-osc-tenant/trustee/trustee-operator	digest	193b4d7 -> 82c9af3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test
This is Konflux nudging PR, not Mintmaker.

Summary by CodeRabbit

• Chores
  • Updated the Trustee operator container image references to a new immutable version.

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: e69da097-2efe-4cbb-94fe-128c894b553b

📥 Commits

Reviewing files that changed from the base of the PR and between 2d37024 and f13f842.

📒 Files selected for processing (1)

• bundle/manifests/trustee-operator.clusterserviceversion.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 9 remain after this review.

---

Walkthrough

The CSV updates three Trustee operator image references to one new immutable container digest.

Changes

Operator image update

Layer / File(s)	Summary
Update operator image references bundle/manifests/trustee-operator.clusterserviceversion.yaml	The CSV metadata, OPERATOR_IMAGE_NAME, and manager deployment container image now use the new operator image digest.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to f13f8

The operator CSV consistently updates its image references to the new immutable digest, with no remaining merge-readiness risk identified.

Suggested reviewers: lmilleri, dbkreling

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies a dependency update for trustee-operator and names the new revision. It matches the main change in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS: The pull request changes only three container image digest references in the CSV. It does not modify Ginkgo tests or test titles. No dynamic test name was introduced.
Test Structure And Quality	✅ Passed	PASS: The pull request changes only three container-image digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml. The parent-to-HEAD diff contains no Ginkgo test code or t…
Microshift Test Compatibility	✅ Passed	PASS: The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml. The diff updates three trustee-operator image digests. It adds no Ginkgo e2e tests, API references, …
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS — The pull request changes only three image references in bundle/manifests/trustee-operator.clusterserviceversion.yaml: the CSV containerImage, OPERATOR_IMAGE_NAME, and manager container im…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS. The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml. The diff replaces the old image digest with sha256:82c9af3... in three image references. It does n…
Ote Binary Stdout Contract	✅ Passed	PASS: The committed PR diff changes only three image-digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml: metadata.annotations.containerImage, OPERATOR_IMAGE_NAME, …
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The pull request changes only three image-digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml. It adds no Ginkgo e2e tests and no test networking code. Therefore,…
No-Weak-Crypto	✅ Passed	PASS. The pull request updates only three trustee-operator image references in bundle/manifests/trustee-operator.clusterserviceversion.yaml to a sha256 digest. It does not add MD5, SHA1, DES, RC…
Container-Privileges	✅ Passed	The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml, with 3 insertions and 3 deletions for image digest references. No privileged: true, host namespace setti…
No-Sensitive-Data-In-Logs	✅ Passed	PASS. The pull request updates immutable Trustee operator image references in the CSV manifest. The changed areas are image metadata, OPERATOR_IMAGE_NAME, and the manager container image; they do …

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Test Structure And Quality

Explanation

PASS: The pull request changes only three container-image digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml. The parent-to-HEAD diff contains no Ginkgo test code or test setup, cleanup, wait, or assertion changes. Therefore, this custom check is not applicable.

Full details: Microshift Test Compatibility

Explanation

PASS: The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml. The diff updates three trustee-operator image digests. It adds no Ginkgo e2e tests, API references, namespaces, or MicroShift assumptions.

Full details: Single Node Openshift (Sno) Test Compatibility

Explanation

PASS — The pull request changes only three image references in bundle/manifests/trustee-operator.clusterserviceversion.yaml: the CSV containerImage, OPERATOR_IMAGE_NAME, and manager container image. The diff adds no Ginkgo e2e tests or other test code, so the SNO multi-node compatibility check is not applicable.

Full details: Topology-Aware Scheduling Compatibility

Explanation

PASS. The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml. The diff replaces the old image digest with sha256:82c9af3... in three image references. It does not add or modify anti-affinity, topology spread constraints, node selectors or affinity, tolerations, replica logic, or PDB settings. The existing replicas: 1 and empty strategy: {} are unchanged. No explicit topology-scheduling failure condition is introduced.

Full details: Ote Binary Stdout Contract

Explanation

PASS: The committed PR diff changes only three image-digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml: metadata.annotations.containerImage, OPERATOR_IMAGE_NAME, and the manager container image. It introduces no main(), init(), suite setup, logging, or stdout code. The commit also identifies the image source revision as 9c6a029..., matching the parent revision. The OTE stdout contract check is therefore not applicable to this manifest-only digest update.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

PASS: The pull request changes only three image-digest references in bundle/manifests/trustee-operator.clusterserviceversion.yaml. It adds no Ginkgo e2e tests and no test networking code. Therefore, this check has no applicable IPv4 or external-connectivity test failure condition.

Full details: No-Weak-Crypto

Explanation

PASS. The pull request updates only three trustee-operator image references in bundle/manifests/trustee-operator.clusterserviceversion.yaml to a sha256 digest. It does not add MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB usage, custom cryptography, or secret/token comparisons. The changed content contains no weak-crypto implementation.

Full details: Container-Privileges

Explanation

The pull request changes only bundle/manifests/trustee-operator.clusterserviceversion.yaml, with 3 insertions and 3 deletions for image digest references. No privileged: true, host namespace setting, SYS_ADMIN, root execution, or allowPrivilegeEscalation: true declaration is introduced. The inspected CSV security context uses allowPrivilegeEscalation: false and runAsNonRoot: true.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The pull request updates immutable Trustee operator image references in the CSV manifest. The changed areas are image metadata, OPERATOR_IMAGE_NAME, and the manager container image; they do not add or modify logging. No sensitive data is exposed through logs by this change.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/component-updates/trustee-operator-bundle-component-update-trustee-operator

---

_{Comment @coderabbitai help to get the list of available commands.}