NO-ISSUE: Rebase 4.20 (Kube bump to 1.33)

Makefile.kube_git.var

@@ -1,5 +1,5 @@
 KUBE_GIT_MAJOR=1
-KUBE_GIT_MINOR=32
-KUBE_GIT_VERSION=v1.32.6
-KUBE_GIT_COMMIT=e52b13b59e910bfa409eaa1e5280c4160b687bf8
+KUBE_GIT_MINOR=33
+KUBE_GIT_VERSION=v1.33.2
+KUBE_GIT_COMMIT=b94367cabf3edea99cfd7ecf7e8bafdc908d83ca
 KUBE_GIT_TREE_STATE=clean

Makefile.version.aarch64.var

@@ -1 +1 @@
-OCP_VERSION := 4.20.0-0.nightly-arm64-2025-07-17-021741
+OCP_VERSION := 4.20.0-0.nightly-arm64-2025-07-20-202529

Makefile.version.x86_64.var

@@ -1 +1 @@
-OCP_VERSION := 4.20.0-0.nightly-2025-07-15-083124
+OCP_VERSION := 4.20.0-0.nightly-2025-07-20-021531

assets/components/multus/kustomization.aarch64.yaml

@@ -2,7 +2,7 @@
 images:
   - name: multus-cni-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:9f5ec7eca07f576a8b2b6015350de810fefd959c6e5b5da9c2e9155620105576
+    digest: sha256:b9868254d91e138f098ef53308eee04f39b116f8d2d713d3d5cafd68012c05d5
   - name: containernetworking-plugins-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:de7edb60134fd0b89ebaa34731765c6597a25d7f23602dc38db6acec2bc275ef
+    digest: sha256:2cf787e30907d5d97c6f86efeb64549588f872b3325e69639c18e14d5d811f64

assets/components/multus/kustomization.x86_64.yaml

@@ -2,7 +2,7 @@
 images:
   - name: multus-cni-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:a758cbecd107a66bffcb05fa9d986f5fea887e77fb28f414c1ad2e5cfbb5cfe7
+    digest: sha256:919bc9f49f30b4d84b97597fce63467999ef0f6567d74ba40cf61574593b9cb4
   - name: containernetworking-plugins-microshift
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:2c7573bf5eff0eba78f5dda4b7b20f796d9e7f618ceb49991d57d446079b62c9
+    digest: sha256:1cd26364880300472476c01ef1eac680c33aba79a0519b08d46b177797bce8ec

assets/components/multus/release-multus-aarch64.json

@@ -1,9 +1,9 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-arm64-2025-07-17-021741"
+    "base": "4.20.0-0.nightly-arm64-2025-07-20-202529"
   },
   "images": {
-    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9f5ec7eca07f576a8b2b6015350de810fefd959c6e5b5da9c2e9155620105576",
-    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de7edb60134fd0b89ebaa34731765c6597a25d7f23602dc38db6acec2bc275ef"
+    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9868254d91e138f098ef53308eee04f39b116f8d2d713d3d5cafd68012c05d5",
+    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2cf787e30907d5d97c6f86efeb64549588f872b3325e69639c18e14d5d811f64"
   }
 }

assets/components/multus/release-multus-x86_64.json

@@ -1,9 +1,9 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-2025-07-15-083124"
+    "base": "4.20.0-0.nightly-2025-07-20-021531"
   },
   "images": {
-    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a758cbecd107a66bffcb05fa9d986f5fea887e77fb28f414c1ad2e5cfbb5cfe7",
-    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2c7573bf5eff0eba78f5dda4b7b20f796d9e7f618ceb49991d57d446079b62c9"
+    "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:919bc9f49f30b4d84b97597fce63467999ef0f6567d74ba40cf61574593b9cb4",
+    "containernetworking-plugins-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1cd26364880300472476c01ef1eac680c33aba79a0519b08d46b177797bce8ec"
   }
 }

assets/controllers/kube-apiserver/defaultconfig.yaml

@@ -113,7 +113,7 @@ apiServerArguments:
   event-ttl:
     - 3h
   goaway-chance:
-    - "0"
+    - "0.001"
   http2-max-streams-per-connection:
     - "2000" # recommended is 1000, but we need to mitigate https://github.com/kubernetes/kubernetes/issues/74412
   kubelet-certificate-authority:

assets/optional/kube-proxy/kustomization.aarch64.yaml

@@ -2,4 +2,4 @@
 images:
   - name: kube-proxy
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:6c2b063bd958d303cc1139edbb8f8cb0743271ed3f0edd52ab1538027219dc1a
+    digest: sha256:1561fdf4f08d0c4f53459f93a03206996d43f60e8de5b9a89d19129cd3979fdd

assets/optional/kube-proxy/kustomization.x86_64.yaml

@@ -2,4 +2,4 @@
 images:
   - name: kube-proxy
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:2bda152d262a81dd1a722078fd7a691336fe1d746e33720c68cee2e16194ba94
+    digest: sha256:16ff3624a9d5d9dd07e030c561acfdb11d60ba06e042d17d09cbbbbf17c2f35c

assets/optional/kube-proxy/release-kube-proxy-aarch64.json

@@ -1,8 +1,8 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-arm64-2025-07-17-021741"
+    "base": "4.20.0-0.nightly-arm64-2025-07-20-202529"
   },
   "images": {
-    "kube-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c2b063bd958d303cc1139edbb8f8cb0743271ed3f0edd52ab1538027219dc1a"
+    "kube-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1561fdf4f08d0c4f53459f93a03206996d43f60e8de5b9a89d19129cd3979fdd"
   }
 }

assets/optional/kube-proxy/release-kube-proxy-x86_64.json

@@ -1,8 +1,8 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-2025-07-15-083124"
+    "base": "4.20.0-0.nightly-2025-07-20-021531"
   },
   "images": {
-    "kube-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2bda152d262a81dd1a722078fd7a691336fe1d746e33720c68cee2e16194ba94"
+    "kube-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16ff3624a9d5d9dd07e030c561acfdb11d60ba06e042d17d09cbbbbf17c2f35c"
   }
 }

assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml

@@ -2,26 +2,26 @@
 images:
   - name: quay.io/operator-framework/olm
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:34ddf657291b60ac23249ea23dea2b5e1f6c9db6cedca633daa0cb22ef72b2a1
+    digest: sha256:c87f750209e4f9bc9d423907117f25dce393fa78786cbf9673a0941531095b1a
   - name: quay.io/operator-framework/configmap-operator-registry
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:6e08e7fee98e13918b85ffdab8104956da0085e431d61f7418377839d5526755
+    digest: sha256:830158e388b21f7112e9185a23e14a04ce519871a738f54ba541797f1476b948
   - name: quay.io/openshift/origin-kube-rbac-proxy
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:ce210b91c041fa4094473b7716a545e0f3c8763b86f4683b3c3a45ff0afbf527
+    digest: sha256:63b11b8fc6f66bc04e20e458448feda4ad4ae032df1a4d000f309d9b30d3eb0e
 
 patches:
   - patch: |-
      - op: add
        path: /spec/template/spec/containers/0/env/-
        value:
          name: OPERATOR_REGISTRY_IMAGE
-         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6e08e7fee98e13918b85ffdab8104956da0085e431d61f7418377839d5526755
+         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:830158e388b21f7112e9185a23e14a04ce519871a738f54ba541797f1476b948
      - op: add
        path: /spec/template/spec/containers/0/env/-
        value:
          name: OLM_IMAGE
-         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34ddf657291b60ac23249ea23dea2b5e1f6c9db6cedca633daa0cb22ef72b2a1
+         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c87f750209e4f9bc9d423907117f25dce393fa78786cbf9673a0941531095b1a
     target:
       kind: Deployment
       labelSelector: app=catalog-operator

assets/optional/operator-lifecycle-manager/kustomization.x86_64.yaml

@@ -2,26 +2,26 @@
 images:
   - name: quay.io/operator-framework/olm
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:bc88964d3a636b71eb931549e58253cadfcb64d3a67cbb21915ba721100710f0
+    digest: sha256:354d018cc6c898a670857ac6623d350ff806feeb0ed7b9ac943dd38d3a0eea94
   - name: quay.io/operator-framework/configmap-operator-registry
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:ce7dd7d362392a849073d9670ef29d636ada6ba7e1d3f31b6527244d77dc997b
+    digest: sha256:f5a0f34d63a9a15c2241e78001cf596e0d813f3afac08230ffebba05ea970ae6
   - name: quay.io/openshift/origin-kube-rbac-proxy
     newName: quay.io/openshift-release-dev/ocp-v4.0-art-dev
-    digest: sha256:1c50aa06d9941f555f0e0fbcc2a3aae27053775f0a8de18ae6248d27cc1f3c99
+    digest: sha256:47497f5076175d0e2d7c7090abcb379ea2a48e6faa8271cc91acf260cfb1f6e8
 
 patches:
   - patch: |-
      - op: add
        path: /spec/template/spec/containers/0/env/-
        value:
          name: OPERATOR_REGISTRY_IMAGE
-         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ce7dd7d362392a849073d9670ef29d636ada6ba7e1d3f31b6527244d77dc997b
+         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5a0f34d63a9a15c2241e78001cf596e0d813f3afac08230ffebba05ea970ae6
      - op: add
        path: /spec/template/spec/containers/0/env/-
        value:
          name: OLM_IMAGE
-         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc88964d3a636b71eb931549e58253cadfcb64d3a67cbb21915ba721100710f0
+         value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:354d018cc6c898a670857ac6623d350ff806feeb0ed7b9ac943dd38d3a0eea94
     target:
       kind: Deployment
       labelSelector: app=catalog-operator

assets/optional/operator-lifecycle-manager/release-olm-aarch64.json

@@ -1,10 +1,10 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-arm64-2025-07-17-021741"
+    "base": "4.20.0-0.nightly-arm64-2025-07-20-202529"
   },
   "images": {
-    "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34ddf657291b60ac23249ea23dea2b5e1f6c9db6cedca633daa0cb22ef72b2a1",
-    "operator-registry": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6e08e7fee98e13918b85ffdab8104956da0085e431d61f7418377839d5526755",
-    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ce210b91c041fa4094473b7716a545e0f3c8763b86f4683b3c3a45ff0afbf527"
+    "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c87f750209e4f9bc9d423907117f25dce393fa78786cbf9673a0941531095b1a",
+    "operator-registry": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:830158e388b21f7112e9185a23e14a04ce519871a738f54ba541797f1476b948",
+    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:63b11b8fc6f66bc04e20e458448feda4ad4ae032df1a4d000f309d9b30d3eb0e"
   }
 }

assets/optional/operator-lifecycle-manager/release-olm-x86_64.json

@@ -1,10 +1,10 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-2025-07-15-083124"
+    "base": "4.20.0-0.nightly-2025-07-20-021531"
   },
   "images": {
-    "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc88964d3a636b71eb931549e58253cadfcb64d3a67cbb21915ba721100710f0",
-    "operator-registry": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ce7dd7d362392a849073d9670ef29d636ada6ba7e1d3f31b6527244d77dc997b",
-    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c50aa06d9941f555f0e0fbcc2a3aae27053775f0a8de18ae6248d27cc1f3c99"
+    "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:354d018cc6c898a670857ac6623d350ff806feeb0ed7b9ac943dd38d3a0eea94",
+    "operator-registry": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5a0f34d63a9a15c2241e78001cf596e0d813f3afac08230ffebba05ea970ae6",
+    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:47497f5076175d0e2d7c7090abcb379ea2a48e6faa8271cc91acf260cfb1f6e8"
   }
 }

assets/release/release-aarch64.json

@@ -1,16 +1,16 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-arm64-2025-07-17-021741"
+    "base": "4.20.0-0.nightly-arm64-2025-07-20-202529"
   },
   "images": {
-    "cli": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d8edb1234cd2b91414db43a653acaaa34684157ab4432b569c42cf5cf06ded23",
-    "coredns": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9fdaf09d9bd5d28dd3a74e1570404adc56ef46a9117e0742a3fc433bf3799fd6",
-    "haproxy-router": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:150d0b09f0f813d795b672df1a382f2cd44891dfb9ca4e907f2aff05af7c358b",
-    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ce210b91c041fa4094473b7716a545e0f3c8763b86f4683b3c3a45ff0afbf527",
-    "ovn-kubernetes-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d4e59c91c531f9c605a7a789aae9b230396b0a2b5a032574b8704bec0f1bf60c",
-    "pod": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9185f520ddc4687791c8aec8b1859b143b3ece97c431529526767984839b8cff",
-    "service-ca-operator": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e88554ad7bde8b439e41a97167e6c288eaa7dca6ed37bd76d2ed01b560a95642",
+    "cli": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c82941c34327dc68d17a3303a3bb9322b35f4d095a7d1e4eb128186cd5f41770",
+    "coredns": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d2e4a5e2ccc575acc00f7ef8b8d609a7adb850bba052d92eab8e73795f0c680c",
+    "haproxy-router": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3021051cc591c668c7a90350c9329b9443d79b459b6b04538b370f3ae9ffc2ea",
+    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:63b11b8fc6f66bc04e20e458448feda4ad4ae032df1a4d000f309d9b30d3eb0e",
+    "ovn-kubernetes-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d5388d99f847ef84f2e11ba4d6baefe4dc52ba1c20d67ecf0ef6770034cebfcd",
+    "pod": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:df689ccdf008db1fae536f6759da868f23987ac2db2cc1f9115a8275328f84a6",
+    "service-ca-operator": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bb9e1049233d9293b56c82035cea6ded2e2d212b216cad875cfbcd1ed6f7c17f",
     "lvms_operator": "registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:0689e27defe411a07da33e339ec65df67e09a3a7080b8e5494fae5cb1a35db36",
-    "csi-snapshot-controller": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:600a9b51b2fec27f0c6fb926d106b5f9a6a9dcea283b701d21598337610867b0"
+    "csi-snapshot-controller": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8eb07d6cae5d4415fb0348795c55dbc11649eb6620a09ed9da03cf762426023e"
   }
 }

assets/release/release-x86_64.json

@@ -1,16 +1,16 @@
 {
   "release": {
-    "base": "4.20.0-0.nightly-2025-07-15-083124"
+    "base": "4.20.0-0.nightly-2025-07-20-021531"
   },
   "images": {
-    "cli": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0b0c6edc7c52a65ed17d77c02ac296f18832b461f9d516883316354e9d10805f",
-    "coredns": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dea048e54189bcfd20b9fee452203ecdadba10e209ab5df243a3eb816f028108",
-    "haproxy-router": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:96b3a76e213f5df04ea2bfaa85bbf858fbbc00b02e96061263a49ad833e01df5",
-    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c50aa06d9941f555f0e0fbcc2a3aae27053775f0a8de18ae6248d27cc1f3c99",
-    "ovn-kubernetes-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7eeb22f103e42843ae45cf9d39bbe50812957c4e75ab8838c12c5a1a0c14b0b5",
-    "pod": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:37816ecf994884f3754b2a00dc6b0a1e2bda220e216274a69c7eeb7e230b5c8e",
-    "service-ca-operator": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:84ea8c47a0fcd184c53cd763e96ad55019bc1e9af384e48dc8ab16825fb15597",
+    "cli": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2f9c6148393d9f20cd1c4260731d22ea5f9fc3eb53a6e13fc0ed111e2624d7ad",
+    "coredns": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b238387c2cc5d5bd5d57f5a7d64622885551a2a82da14fa9780ea7eb52006364",
+    "haproxy-router": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d749138e9fb0af5b68e6e1f36848de150650056bd29bf27106e0bae06ac1090",
+    "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:47497f5076175d0e2d7c7090abcb379ea2a48e6faa8271cc91acf260cfb1f6e8",
+    "ovn-kubernetes-microshift": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2aaf091e9abfaab6dceaaa150a246ae1dfbeaf329b612ad2ea645412b7758173",
+    "pod": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:59be194b3ec193e649e7a284b25011cf5bc93c422d2a7dfcb58229ec2859cce2",
+    "service-ca-operator": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9371b1d1ba86bf7610fa0f1ae9a767e76f04f0d88c2848ba4f7476d424258f58",
     "lvms_operator": "registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:b372811ed8263f80c0903a63e9fd9d05d4dbf2b4d7adcb32304108124841e5bc",
-    "csi-snapshot-controller": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:65968340652adb00b1adcdcb2a06313c8f676868f8e1d7231b8504e291c195f6"
+    "csi-snapshot-controller": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f6e10e88fca54b70ce02874726521867cf46f87ef80dc7125aac365f4e687b26"
   }
 }

deps/github.com/openshift/cluster-policy-controller/.ci-operator.yaml

@@ -0,0 +1,4 @@
+build_root_image:
+  name: release
+  namespace: openshift
+  tag: rhel-9-release-golang-1.23-openshift-4.19

deps/github.com/openshift/cluster-policy-controller/.gitignore

@@ -0,0 +1,20 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, build with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+/cluster-policy-controller
+.vscode/
+vendor/github.com/prometheus/client_model/.classpath
+vendor/github.com/prometheus/client_model/.project
+vendor/github.com/prometheus/client_model/.settings/
+
+.idea

deps/github.com/openshift/cluster-policy-controller/.snyk

@@ -0,0 +1,7 @@
+# References:
+# https://docs.snyk.io/scan-applications/snyk-code/using-snyk-code-from-the-cli/excluding-directories-and-files-from-the-snyk-code-cli-test
+# https://docs.snyk.io/snyk-cli/commands/ignore
+exclude:
+  global:
+    - vendor/**
+    - "**/*_test.go"

deps/github.com/openshift/cluster-policy-controller/Dockerfile.rhel

@@ -0,0 +1,10 @@
+FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.23-openshift-4.19 AS builder
+WORKDIR /go/src/github.com/openshift/cluster-policy-controller
+COPY . .
+RUN make build --warn-undefined-variables
+
+FROM registry.ci.openshift.org/ocp/4.19:base-rhel9
+COPY --from=builder /go/src/github.com/openshift/cluster-policy-controller/cluster-policy-controller /usr/bin/
+LABEL io.k8s.display-name="OpenShift Cluster Policy Controller Command" \
+      io.k8s.description="OpenShift is a platform for developing, building, and deploying containerized applications." \
+      io.openshift.tags="openshift,cluster-policy-controller"