Update hyperfleet-operator to bdb245b

[red-hat-konflux-kflux-prd-rh02]

Image created from 'https://github.com/openshift-hyperfleet/hyperfleet-operator?rev=22898fd8d0e1ed0337338fce65ba10ce503a69ed'

This PR contains the following updates:

Package	Update	Change
quay.io/redhat-user-workloads/hyperfleet-tenant/hyperfleet/hyperfleet-operator	digest	63fb447 -> bdb245b

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test
This is Konflux nudging PR, not Mintmaker.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tirthct for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 3a59f15b-77ea-4249-b7a1-01983a677031

📥 Commits

Reviewing files that changed from the base of the PR and between 1854db3 and d667054.

📒 Files selected for processing (1)

• config/manifests/prod/kustomization.yaml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• openshift-hyperfleet/architecture (manual)
• openshift-hyperfleet/hyperfleet-api (manual)
• openshift-hyperfleet/hyperfleet-sentinel (manual)
• openshift-hyperfleet/hyperfleet-adapter (manual)
• openshift-hyperfleet/hyperfleet-broker (manual)

Included review availability: Your plan provides up to 12 included reviews per hour; 6 remain after this review.

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated the Hyperfleet operator image used in production deployments.

Walkthrough

The production Kustomize manifest now uses digest sha256:bdb245b330e456aecad9a34b91c63e7c5fc1a0339b5b0bbcbe5ea146bd34d42a for both RELATED_IMAGE_HYPERFLEET_OPERATOR and the controller Deployment container image.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: ma-hill

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the hyperfleet-operator image update and includes the new digest prefix.
Description check	✅ Passed	The description directly documents the hyperfleet-operator digest update, source revision, and automerge configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	No SEC-02 violation. The pull request changes only config/manifests/prod/kustomization.yaml, replacing two container image digests. The added lines contain no log statement and no token, password, c…
No Hardcoded Secrets	✅ Passed	The pull request changes only two Hyperfleet operator image references in config/manifests/prod/kustomization.yaml. Both new literals are quay.io/...@sha256:<64 lowercase hex> image digests, not c…
No Weak Cryptography	✅ Passed	PASS. The PR changes only two OCI image references in config/manifests/prod/kustomization.yaml, from one sha256 digest to another. The sha256 values are image content digests, not banned primiti…
No Injection Vectors	✅ Passed	PASS. The pull request changes only two fixed SHA-256 image references in config/manifests/prod/kustomization.yaml. It introduces no SQL query construction, command execution, template.HTML(), or …
No Privileged Containers	✅ Passed	PASS: The PR changes only two image-digest values in config/manifests/prod/kustomization.yaml. It adds no privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation, or runAsUser: …
No Pii Or Sensitive Data In Logs	✅ Passed	PASS. The pull request changes only config/manifests/prod/kustomization.yaml. Both changes replace the Hyperfleet operator container image digest. No slog, logr, zap, log, or fmt.Print* lo…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

✨ Simplify code

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.