k-orc · mandre · Mar 23, 2026 · Mar 23, 2026 · Mar 23, 2026 · Mar 23, 2026
diff --git a/Makefile b/Makefile
@@ -3,7 +3,7 @@ IMG ?= controller:latest
 BUNDLE_IMG ?= bundle:latest
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
 ENVTEST_K8S_VERSION = 1.29.0
-TRIVY_VERSION = 0.49.1
+TRIVY_VERSION = 0.69.3
 GO_VERSION ?= 1.25.8
 
 # Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
@@ -311,14 +311,14 @@ GOVULNCHECK = $(LOCALBIN)/govulncheck
 OPERATOR_SDK = $(LOCALBIN)/operator-sdk
 
 ## Tool Versions
-KUSTOMIZE_VERSION ?= v5.6.0
-CONTROLLER_TOOLS_VERSION ?= v0.17.1
-ENVTEST_VERSION ?= release-0.22
-GOLANGCI_LINT_VERSION ?= v2.7.2
+KUSTOMIZE_VERSION ?= v5.8.1
+CONTROLLER_TOOLS_VERSION ?= v0.20.1
+ENVTEST_VERSION ?= release-0.23
+GOLANGCI_LINT_VERSION ?= v2.11.4
 MOCKGEN_VERSION ?= v0.6.0
-KUTTL_VERSION ?= v0.24.0
+KUTTL_VERSION ?= v0.25.0
 GOVULNCHECK_VERSION ?= v1.1.4
-OPERATOR_SDK_VERSION ?= v1.41.1
+OPERATOR_SDK_VERSION ?= v1.42.2
 
 .PHONY: kustomize
 kustomize: $(KUSTOMIZE) ## Download kustomize locally if necessary.

diff --git a/config/crd/bases/openstack.k-orc.cloud_addressscopes.yaml b/config/crd/bases/openstack.k-orc.cloud_addressscopes.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: addressscopes.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_domains.yaml b/config/crd/bases/openstack.k-orc.cloud_domains.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: domains.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_endpoints.yaml b/config/crd/bases/openstack.k-orc.cloud_endpoints.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: endpoints.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_flavors.yaml b/config/crd/bases/openstack.k-orc.cloud_flavors.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: flavors.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_floatingips.yaml b/config/crd/bases/openstack.k-orc.cloud_floatingips.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: floatingips.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_groups.yaml b/config/crd/bases/openstack.k-orc.cloud_groups.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: groups.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_images.yaml b/config/crd/bases/openstack.k-orc.cloud_images.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: images.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_keypairs.yaml b/config/crd/bases/openstack.k-orc.cloud_keypairs.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: keypairs.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_networks.yaml b/config/crd/bases/openstack.k-orc.cloud_networks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: networks.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_ports.yaml b/config/crd/bases/openstack.k-orc.cloud_ports.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: ports.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_projects.yaml b/config/crd/bases/openstack.k-orc.cloud_projects.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: projects.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_roles.yaml b/config/crd/bases/openstack.k-orc.cloud_roles.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: roles.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_routerinterfaces.yaml b/config/crd/bases/openstack.k-orc.cloud_routerinterfaces.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: routerinterfaces.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_routers.yaml b/config/crd/bases/openstack.k-orc.cloud_routers.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: routers.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_securitygroups.yaml b/config/crd/bases/openstack.k-orc.cloud_securitygroups.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: securitygroups.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_servergroups.yaml b/config/crd/bases/openstack.k-orc.cloud_servergroups.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: servergroups.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_servers.yaml b/config/crd/bases/openstack.k-orc.cloud_servers.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: servers.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_services.yaml b/config/crd/bases/openstack.k-orc.cloud_services.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: services.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_subnets.yaml b/config/crd/bases/openstack.k-orc.cloud_subnets.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: subnets.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_trunks.yaml b/config/crd/bases/openstack.k-orc.cloud_trunks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: trunks.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_users.yaml b/config/crd/bases/openstack.k-orc.cloud_users.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: users.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_volumes.yaml b/config/crd/bases/openstack.k-orc.cloud_volumes.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: volumes.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/config/crd/bases/openstack.k-orc.cloud_volumetypes.yaml b/config/crd/bases/openstack.k-orc.cloud_volumetypes.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.17.1
+    controller-gen.kubebuilder.io/version: v0.20.1
   name: volumetypes.openstack.k-orc.cloud
 spec:
   group: openstack.k-orc.cloud

diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/k-orc/openstack-resource-controller/v2
 
-go 1.25.7
+go 1.25.0
 
 require (
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc

diff --git a/internal/controllers/endpoint/actuator.go b/internal/controllers/endpoint/actuator.go
@@ -82,10 +82,11 @@ func (actuator endpointActuator) ListOSResourcesForAdoption(ctx context.Context,
 		return nil, false
 	}
 
-	var filters []osclients.ResourceFilter[osResourceT]
-	filters = append(filters, func(e *endpoints.Endpoint) bool {
-		return e.URL == resourceSpec.URL
-	})
+	filters := []osclients.ResourceFilter[osResourceT]{
+		func(e *endpoints.Endpoint) bool {
+			return e.URL == resourceSpec.URL
+		},
+	}
 
 	listOpts := endpoints.ListOpts{
 		Availability: gophercloud.Availability(resourceSpec.Interface),

diff --git a/internal/controllers/keypair/actuator.go b/internal/controllers/keypair/actuator.go
@@ -78,10 +78,11 @@ func (actuator keypairActuator) ListOSResourcesForAdoption(ctx context.Context,
 	// Filter by the expected resource name to avoid adopting wrong keypairs.
 	// The OpenStack Keypairs API does not support server-side filtering by name,
 	// so we must use client-side filtering.
-	var filters []osclients.ResourceFilter[osResourceT]
-	filters = append(filters, func(kp *keypairs.KeyPair) bool {
-		return kp.Name == getResourceName(orcObject)
-	})
+	filters := []osclients.ResourceFilter[osResourceT]{
+		func(kp *keypairs.KeyPair) bool {
+			return kp.Name == getResourceName(orcObject)
+		},
+	}
 
 	return actuator.listOSResources(ctx, filters, keypairs.ListOpts{}), true
 }

diff --git a/internal/controllers/servergroup/actuator.go b/internal/controllers/servergroup/actuator.go
@@ -72,15 +72,13 @@ func (actuator servergroupActuator) ListOSResourcesForAdoption(ctx context.Conte
 		return nil, false
 	}
 
-	var filters []osclients.ResourceFilter[osResourceT]
-	listOpts := servergroups.ListOpts{}
-
-	filters = append(filters,
+	filters := []osclients.ResourceFilter[osResourceT]{
 		func(f *servergroups.ServerGroup) bool {
 			name := getResourceName(orcObject)
 			return f.Name == name
 		},
-	)
+	}
+	listOpts := servergroups.ListOpts{}
 
 	return actuator.listOSResources(ctx, filters, &listOpts), true
 }

diff --git a/tools/orc-api-linter/go.mod b/tools/orc-api-linter/go.mod
@@ -4,7 +4,7 @@ go 1.24.0
 
 require (
 	golang.org/x/tools v0.41.0
-	sigs.k8s.io/kube-api-linter v0.0.0-20260205134631-d65d24a9df89
+	sigs.k8s.io/kube-api-linter v0.0.0-20260320123815-c9b9b51b278a
 )
 
 require (

diff --git a/tools/orc-api-linter/go.sum b/tools/orc-api-linter/go.sum
@@ -37,7 +37,7 @@ k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b h1:gMplByicHV/TJBizHd9aVEsTYo
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b/go.mod h1:CgujABENc3KuTrcsdpGmrrASjtQsWCT7R99mEV4U/fM=
 k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 h1:M3sRQVHv7vB20Xc2ybTt7ODCeFj6JSWYFzOFnYeS6Ro=
 k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-sigs.k8s.io/kube-api-linter v0.0.0-20260205134631-d65d24a9df89 h1:QuWBEzbBkQyuwWPKDEaUBGr8QdHilkc4CdJYCeU1SIo=
-sigs.k8s.io/kube-api-linter v0.0.0-20260205134631-d65d24a9df89/go.mod h1:5mP60UakkCye+eOcZ5p98VnV2O49qreW1gq9TdsUf7Q=
+sigs.k8s.io/kube-api-linter v0.0.0-20260320123815-c9b9b51b278a h1:36He06lekH8jv21Z88RiGHRswh/cBoXKfSbFleF7ukM=
+sigs.k8s.io/kube-api-linter v0.0.0-20260320123815-c9b9b51b278a/go.mod h1:5mP60UakkCye+eOcZ5p98VnV2O49qreW1gq9TdsUf7Q=
 sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
 sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
diff --git a/website/Makefile b/website/Makefile
@@ -1,7 +1,7 @@
 .PHONY: default
 default: generated
 
-CRD_REF_DOCS?=github.com/elastic/crd-ref-docs@v0.2.0
+CRD_REF_DOCS?=github.com/elastic/crd-ref-docs@v0.3.0
 GOMARKDOC?=github.com/princjef/gomarkdoc/cmd/gomarkdoc@v1.1.0
 
 websitedir := $(dir $(lastword $(MAKEFILE_LIST)))