feat: Update minKubeVersion to v1.31.0

Update the minimum Kubernetes version to 1.31.0 in the operator bundle
and CI workflow. Note: this is a breaking changes for users running on
older versions of Kubernetes that are no longer supported by the
community.

The KinD configuration was updated to match the version tested with
shipwright-io/build.

Assisted-by: Cursor
Signed-off-by: Adam Kaplan <[email protected]>

Author: adambkaplan

.github/workflows/ci.yml

@@ -60,7 +60,7 @@ jobs:
           # Kubernetes version must match a built KinD node image.
           # See release notes in https://github.com/kubernetes-sigs/kind/releases for supported
           # node image versions.
-          - v1.30.6
+          - v1.31.9
       max-parallel: 2
     runs-on: ubuntu-latest
     steps:
@@ -81,7 +81,7 @@ jobs:
     - name: Create KinD cluster
       uses: helm/kind-action@v1
       with:
-        version: v0.25.0
+        version: v0.29.0
         node_image: kindest/node:${{ matrix.kubernetes }}
         cluster_name: kind
         config: test/kind/config.yaml

bundle/manifests/shipwright-operator.clusterserviceversion.yaml

@@ -777,7 +777,7 @@ spec:
   - email: [email protected]
     name: The Shipwright Contributors
   maturity: alpha
-  minKubeVersion: 1.29.0
+  minKubeVersion: 1.31.0
   provider:
     name: The Shipwright Contributors
     url: https://shipwright.io

config/manifests/bases/shipwright-operator.clusterserviceversion.yaml

@@ -86,7 +86,7 @@ spec:
   - email: [email protected]
     name: The Shipwright Contributors
   maturity: alpha
-  minKubeVersion: 1.29.0
+  minKubeVersion: 1.31.0
   provider:
     name: The Shipwright Contributors
     url: https://shipwright.io

test/kind/config.yaml

@@ -1,14 +1,20 @@
 kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
+kubeadmConfigPatches:
+  - |
+    kind: ClusterConfiguration
+    metadata:
+      name: config
+    apiServer:
+      extraArgs:
+        enable-admission-plugins: PodSecurity
 containerdConfigPatches:
 - |-
   [plugins."io.containerd.grpc.v1.cri".registry.mirrors."localhost:5000"]
     endpoint = ["http://kind-registry:5000"]
 nodes:
 - role: control-plane
-  kubeadmConfigPatches:
-  - |
-    kind: ClusterConfiguration
-    apiServer:
-      extraArgs:
-        enable-admission-plugins: CertificateApproval,CertificateSigning,CertificateSubjectRestriction,DefaultIngressClass,DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,OwnerReferencesPermissionEnforcement,PersistentVolumeClaimResize,PersistentVolumeLabel,PodNodeSelector,PodTolerationRestriction,Priority,ResourceQuota,RuntimeClass,ServiceAccount,StorageObjectInUseProtection,TaintNodesByCondition,ValidatingAdmissionWebhook
+  extraPortMappings:
+  - containerPort: 32222
+    hostPort: 32222
+