Skip to content

build(deps): bump github.com/open-telemetry/opentelemetry-operator/apis from 0.158.0 to 0.161.0 - #1298

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/open-telemetry/opentelemetry-operator/apis-0.161.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/open-telemetry/opentelemetry-operator/apis-0.161.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/open-telemetry/opentelemetry-operator/apis from 0.158.0 to 0.161.0.

Release notes

Sourced from github.com/open-telemetry/opentelemetry-operator/apis's releases.

Release v0.161.0

0.161.0

🛑 Breaking changes 🛑

  • opamp: Use the Kubernetes cluster ID to compute standalone OpAMP Bridge agent instance IDs. (#5689)

    • Existing standalone agents will report new instance IDs after upgrade.
    • The bridge now requires the "get" permission on the "kube-system" namespace to read the cluster ID.
  • collector: Remove the deprecated --create-rbac-permissions CLI flag. RBAC permission creation is now exclusively autodetected at startup. (#2588) The flag was deprecated in v0.88.0. The operator now always autodetects whether its service account can create ClusterRoles and ClusterRoleBindings.

💡 Enhancements 💡

  • collector: Add revisionHistoryLimit field to OpenTelemetryCommonFields to control the number of old ReplicaSets retained for Deployment and StatefulSet workloads, and for the TargetAllocator Deployment. (#0)

  • collector: Skip the automatic GOMEMLIMIT and GOMAXPROCS environment variables when the collector config enables the cgroup_runtime extension. (#5651) The extension sets both variables from the cgroup limits and does nothing when they are already present. The deprecated cgroupruntime type name is recognized as well. Each variable is skipped only while its gomemlimit.enabled or gomaxprocs.enabled setting is true.

  • collector, target allocator: Add imagePullSecrets to the OpenTelemetryCollector and TargetAllocator CRs, passed through to the pod spec of the generated workloads. A target allocator embedded in an OpenTelemetryCollector uses the collector's imagePullSecrets. (#4376)

  • collector: Register the webhook_event receiver (alias webhookevent) so the operator derives its Service port from endpoint, which the receiver requires, and rejects a configuration that omits it. (#5631)

🧰 Bug fixes 🧰

  • collector: Fix the collector defaulting webhook panicking when receivers or exporters is missing. (#5735) The request is now rejected by CRD validation, as it already was when no component defaults apply.

  • target allocator: Honor the cumulative temporality preference for counters bridged from the Prometheus registry in OTLP self-telemetry. (#5700) Bridged counters, such as the Prometheus service discovery metrics, were converted to delta regardless of temporality_preference. They are now converted only when the preference selects delta for counters (delta or low_memory), and are exported as cumulative otherwise.

  • target allocator: Keep the Kubernetes API server addresses in the target allocator NetworkPolicy up to date. (#5551) The operator now watches the EndpointSlices of the default/kubernetes Service and updates the target allocator NetworkPolicy when they change, instead of using the addresses discovered once at operator startup. Addresses which disappear from the EndpointSlices remain allowed for 5 minutes, to tolerate transient changes. The NetworkPolicy also allows egress to the kubernetes Service ClusterIP, and uses correct CIDRs for IPv6 addresses. The operator now requires the watch permission on endpointslices in the discovery.k8s.io API group.

  • operator: Fix the --tls-min-version CLI flag being ignored because it was matched against the wrong flag name. (#3565)

  • sidecar: Prevent sidecar injection into invalid pods with zero regular containers (#5737) Pods without containers are invalid in Kubernetes. Skipping injection allows Kubernetes to reject the invalid Pod rather than mutating it into a valid one.

Components

... (truncated)

Changelog

Sourced from github.com/open-telemetry/opentelemetry-operator/apis's changelog.

0.161.0

🛑 Breaking changes 🛑

  • opamp: Use the Kubernetes cluster ID to compute standalone OpAMP Bridge agent instance IDs. (#5689)

    • Existing standalone agents will report new instance IDs after upgrade.
    • The bridge now requires the "get" permission on the "kube-system" namespace to read the cluster ID.
  • collector: Remove the deprecated --create-rbac-permissions CLI flag. RBAC permission creation is now exclusively autodetected at startup. (#2588) The flag was deprecated in v0.88.0. The operator now always autodetects whether its service account can create ClusterRoles and ClusterRoleBindings.

💡 Enhancements 💡

  • collector: Add revisionHistoryLimit field to OpenTelemetryCommonFields to control the number of old ReplicaSets retained for Deployment and StatefulSet workloads, and for the TargetAllocator Deployment. (#0)

  • collector: Skip the automatic GOMEMLIMIT and GOMAXPROCS environment variables when the collector config enables the cgroup_runtime extension. (#5651) The extension sets both variables from the cgroup limits and does nothing when they are already present. The deprecated cgroupruntime type name is recognized as well. Each variable is skipped only while its gomemlimit.enabled or gomaxprocs.enabled setting is true.

  • collector, target allocator: Add imagePullSecrets to the OpenTelemetryCollector and TargetAllocator CRs, passed through to the pod spec of the generated workloads. A target allocator embedded in an OpenTelemetryCollector uses the collector's imagePullSecrets. (#4376)

  • collector: Register the webhook_event receiver (alias webhookevent) so the operator derives its Service port from endpoint, which the receiver requires, and rejects a configuration that omits it. (#5631)

🧰 Bug fixes 🧰

  • collector: Fix the collector defaulting webhook panicking when receivers or exporters is missing. (#5735) The request is now rejected by CRD validation, as it already was when no component defaults apply.

  • target allocator: Honor the cumulative temporality preference for counters bridged from the Prometheus registry in OTLP self-telemetry. (#5700) Bridged counters, such as the Prometheus service discovery metrics, were converted to delta regardless of temporality_preference. They are now converted only when the preference selects delta for counters (delta or low_memory), and are exported as cumulative otherwise.

  • target allocator: Keep the Kubernetes API server addresses in the target allocator NetworkPolicy up to date. (#5551) The operator now watches the EndpointSlices of the default/kubernetes Service and updates the target allocator NetworkPolicy when they change, instead of using the addresses discovered once at operator startup. Addresses which disappear from the EndpointSlices remain allowed for 5 minutes, to tolerate transient changes. The NetworkPolicy also allows egress to the kubernetes Service ClusterIP, and uses correct CIDRs for IPv6 addresses. The operator now requires the watch permission on endpointslices in the discovery.k8s.io API group.

  • operator: Fix the --tls-min-version CLI flag being ignored because it was matched against the wrong flag name. (#3565)

  • sidecar: Prevent sidecar injection into invalid pods with zero regular containers (#5737) Pods without containers are invalid in Kubernetes. Skipping injection allows Kubernetes to reject the invalid Pod rather than mutating it into a valid one.

Components

... (truncated)

Commits
  • f3bd366 [chore] Prepare release 0.161.0 (#5772)
  • f88d347 fix/skip injection for empty pods (#5753)
  • b845495 Update github.com/openshift/api digest to a549fae (#5768)
  • 9df7982 Use k8s cluster ID to computer opamp agent ID (#5690)
  • 9443bf7 Update github.com/openshift/library-go digest to 721d3db (#5769)
  • cc3dd8a Update open-telemetry/shared-workflows action to v0.19.0 (#5767)
  • 71a7b0d Update module golang.org/x/mod to v0.42.0 (#5766)
  • 15e7aeb Update module github.com/prometheus/client_golang to v1.25.0 (#5765)
  • 7c59d10 Update module sigs.k8s.io/gateway-api to v1.6.3 (#5764)
  • 71fa04e Update github.com/openshift/api digest to f9511d3 (#5756)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/open-telemetry/opentelemetry-operator/apis](https://github.com/open-telemetry/opentelemetry-operator) from 0.158.0 to 0.161.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-operator/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-operator/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-operator@v0.158.0...v0.161.0)

---
updated-dependencies:
- dependency-name: github.com/open-telemetry/opentelemetry-operator/apis
  dependency-version: 0.161.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 16, 2026
@openshift-ci

openshift-ci Bot commented Oct 16, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign simonpasquier for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Oct 16, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a rhobs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@coderabbitai

coderabbitai Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 0a470384-71cb-42f3-9bd7-bf98556916bc
📥 Commits

Reviewing files that changed from the base of the PR and between 611c807 and 9c6797d.

⛔ Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing: 1
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Walkthrough

The required github.com/open-telemetry/opentelemetry-operator/apis dependency is updated from v0.158.0 to v0.161.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: jan--f

Merge Risk: ⚪ Minimal · up to 9c679

The API update remains compatible with the collector integration, and no deployment risk is established from this change.

Pre-merge checks: Passed 5
Check name Status Explanation
Title check Passed The title clearly identifies the dependency and version update from 0.158.0 to 0.161.0.
Description check Passed The description directly explains the dependency update and includes relevant release notes.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code needs-ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant