fix(deps): update module github.com/openmcp-project/openmcp-operator/lib to v0.17.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/openmcp-project/openmcp-operator/lib	require	minor	v0.15.2 -> v0.17.0

---

Release Notes

openmcp-project/openmcp-operator (github.com/openmcp-project/openmcp-operator/lib)

v0.17.0

Compare Source

Changes included in v0.17.0:

🚀 Features

• release v0.17.0 #​198

  • [OPERATOR][FEATURE] - Release v0.17.0 of the github.com/openmcp-project/opencmp-operator

• allow to control the high availability config of ps mcp #​191

  • [OPERATOR][FEATURE] Allow to configure number of replicas and topology spread constraints of the platform service managed control plane.

• user-friendly secret name for MCP access #​193

  • [USER][FEATURE] New name pattern for MCP access secrets on the onboarding cluster. The secret name clearly refers to the corresponding MCP IAM spec values as follows: <provider-name>.<mcp-name>.kubeconfig where provider-name is either an OIDC provider or static token name.

🔧 Chores

• enable ClusterAccessReconciler's Reconcile method to be called during deletion #​197
  • [DEVELOPER][FEATURE] The ClusterAccess Reconciler's Reconcile method can now be called during the deletion logic of the embedding controller without re-creating resources that have already been deleted by an earlier ReconcileDelete call. This means Reconcile can now be called at the beginning of a deleting reconciliation and ReconcileDelete at the end, without resources being created and deleted endlessly when walking through this deletion flow multiple times (because the request is reconciled multiple times because it needs to wait for resources being deleted).
• enable provider webhooks #​195
  • [OPERATOR][FEATURE] During provider deployment, it is now checked whether a webhook TLS secret exists for the provider being deployed. If so, it is automatically mounted in the run container. The name of the mounted secret is determined by the new WebhookSecretName function from the lib/utils package.

v0.16.0

Compare Source

Changes included in v0.16.0:

🚀 Features

• release v0.16.0 #​190
  • [USER][FEATURE] - Release v0.16.0
• prepare for high availability #​188
  • [OPERATOR][FEATURE] Add high availability features for the openmcp-operator and service-providers, cluster-providers and platform-services
• exclude provider fields from status update & utility to set these fields #​187
  • [DEVELOPER][FEATURE] - Utility function for service providers to add the kinds of their managed resources to the ServiceProvider status

🔧 Chores

• remove namespace field from secret reference in AccessRequest status #​183
  • [USER][BREAKING] Removed the status.secretRef.namespace field from AccessRequest resources which was added by accident. The access secrets are expected to be in the same namespace as the AccessRequest itself, so wherever this field is read, it can just be replaced with the AccessRequest's namespace.
• improve the advanced clusteraccess library's abilities to mock fake clients in unit tests #​186
  • [DEVELOPER][FEATURE] The advanced ClusterAccess library's capabilities regarding unit tests have been enhanced by adding a configurable FakeClientGenerator to the reconciler. If set, this function will be called when trying to build a client.Client out of an AccessRequest's kubeconfig secret. This enables the test code to inject fake client implementations into the reconciler's Access method and thereby removes the need for any test-specific coding in the controller's logic itself.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/openmcp-project/openmcp-operator/api	v0.15.2 -> v0.17.0